diff --git a/.github/actions/fetch-codeql/action.yml b/.github/actions/fetch-codeql/action.yml index 0ef4489ade9..908df6cab96 100644 --- a/.github/actions/fetch-codeql/action.yml +++ b/.github/actions/fetch-codeql/action.yml @@ -19,4 +19,6 @@ runs: gh extension install github/gh-codeql gh codeql set-channel "$CHANNEL" gh codeql version + printf "CODEQL_FETCHED_CODEQL_PATH=" >> "${GITHUB_ENV}" + gh codeql version --format=json | jq -r .unpackedLocation >> "${GITHUB_ENV}" gh codeql version --format=json | jq -r .unpackedLocation >> "${GITHUB_PATH}" diff --git a/.github/actions/os-version/action.yml b/.github/actions/os-version/action.yml new file mode 100644 index 00000000000..31a33b7a937 --- /dev/null +++ b/.github/actions/os-version/action.yml @@ -0,0 +1,32 @@ +name: OS Version +description: Get OS version. + +outputs: + version: + description: "OS version" + value: ${{ steps.version.outputs.version }} + +runs: + using: composite + steps: + - if: runner.os == 'Linux' + shell: bash + run: | + . /etc/os-release + echo "VERSION=${NAME} ${VERSION}" >> $GITHUB_ENV + - if: runner.os == 'Windows' + shell: powershell + run: | + $objects = systeminfo.exe /FO CSV | ConvertFrom-Csv + "VERSION=$($objects.'OS Name') $($objects.'OS Version')" >> $env:GITHUB_ENV + - if: runner.os == 'macOS' + shell: bash + run: | + echo "VERSION=$(sw_vers -productName) $(sw_vers -productVersion)" >> $GITHUB_ENV + - name: Emit OS version + id: version + shell: bash + run: | + echo "$VERSION" + echo "version=${VERSION}" >> $GITHUB_OUTPUT + diff --git a/.github/workflows/mad_modelDiff.yml b/.github/workflows/mad_modelDiff.yml index 586b1576bd6..8cfaac6f134 100644 --- a/.github/workflows/mad_modelDiff.yml +++ b/.github/workflows/mad_modelDiff.yml @@ -11,7 +11,7 @@ on: branches: - main paths: - - "java/ql/src/utils/model-generator/**/*.*" + - "java/ql/src/utils/modelgenerator/**/*.*" - ".github/workflows/mad_modelDiff.yml" permissions: @@ -40,12 +40,12 @@ jobs: - name: Download database env: SLUG: ${{ matrix.slug }} + GH_TOKEN: ${{ github.token }} run: | set -x mkdir lib-dbs SHORTNAME=${SLUG//[^a-zA-Z0-9_]/} - projectId=`curl -s https://lgtm.com/api/v1.0/projects/g/${SLUG} | jq .id` - curl -L "https://lgtm.com/api/v1.0/snapshots/$projectId/java" -o "$SHORTNAME.zip" + gh api -H "Accept: application/zip" "/repos/${SLUG}/code-scanning/codeql/databases/java" > "$SHORTNAME.zip" unzip -q -d "${SHORTNAME}-db" "${SHORTNAME}.zip" mkdir "lib-dbs/$SHORTNAME/" mv "${SHORTNAME}-db/"$(ls -1 "${SHORTNAME}"-db)/* "lib-dbs/${SHORTNAME}/" @@ -61,7 +61,7 @@ jobs: DATABASE=$2 cd codeql-$QL_VARIANT SHORTNAME=`basename $DATABASE` - python java/ql/src/utils/model-generator/GenerateFlowModel.py --with-summaries --with-sinks $DATABASE ${SHORTNAME}.temp.model.yml + python java/ql/src/utils/modelgenerator/GenerateFlowModel.py --with-summaries --with-sinks $DATABASE ${SHORTNAME}.temp.model.yml mv java/ql/lib/ext/generated/${SHORTNAME}.temp.model.yml $MODELS/${SHORTNAME}Generated_${QL_VARIANT}.model.yml cd .. } @@ -100,4 +100,6 @@ jobs: with: name: diffs path: tmp-models/*.html + # An html file is only produced if the generated models differ. + if-no-files-found: ignore retention-days: 20 diff --git a/.github/workflows/mad_regenerate-models.yml b/.github/workflows/mad_regenerate-models.yml index d92e3652d5c..6b3d0347a86 100644 --- a/.github/workflows/mad_regenerate-models.yml +++ b/.github/workflows/mad_regenerate-models.yml @@ -50,7 +50,7 @@ jobs: SLUG: ${{ matrix.slug }} run: | SHORTNAME=${SLUG//[^a-zA-Z0-9_]/} - java/ql/src/utils/model-generator/RegenerateModels.py "${SLUG}" dbs/${SHORTNAME} + java/ql/src/utils/modelgenerator/RegenerateModels.py "${SLUG}" dbs/${SHORTNAME} - name: Stage changes run: | find java -name "*.model.yml" -print0 | xargs -0 git add diff --git a/.github/workflows/ql-for-ql-build.yml b/.github/workflows/ql-for-ql-build.yml index 29b8bc16300..f63ea5a2b32 100644 --- a/.github/workflows/ql-for-ql-build.yml +++ b/.github/workflows/ql-for-ql-build.yml @@ -27,7 +27,7 @@ jobs: uses: ./.github/actions/find-latest-bundle - name: Find codeql id: find-codeql - uses: github/codeql-action/init@77a8d2d10c0b403a8b4aadbd223dc489ecd22683 + uses: github/codeql-action/init@45955cb1830b640e2c1603ad72ad542a49d47b96 with: languages: javascript # does not matter tools: ${{ steps.find-latest-bundle.outputs.url }} @@ -38,12 +38,14 @@ jobs: shell: bash env: CODEQL: ${{ steps.find-codeql.outputs.codeql-path }} + - uses: ./.github/actions/os-version + id: os_version - name: Cache entire pack id: cache-pack uses: actions/cache@v3 with: path: ${{ runner.temp }}/pack - key: ${{ runner.os }}-pack-${{ hashFiles('ql/**/Cargo.lock') }}-${{ hashFiles('ql/**/*.rs') }}-${{ hashFiles('ql/**/*.ql*') }}-${{ hashFiles('ql/**/qlpack.yml') }}-${{ hashFiles('ql/ql/src/ql.dbscheme*') }}-${{ steps.get-codeql-version.outputs.version }}--${{ hashFiles('.github/workflows/ql-for-ql-build.yml') }} + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-pack-${{ hashFiles('ql/**/Cargo.lock') }}-${{ hashFiles('ql/**/*.rs') }}-${{ hashFiles('ql/**/*.ql*') }}-${{ hashFiles('ql/**/qlpack.yml') }}-${{ hashFiles('ql/ql/src/ql.dbscheme*') }}-${{ steps.get-codeql-version.outputs.version }}--${{ hashFiles('.github/workflows/ql-for-ql-build.yml') }} - name: Cache queries if: steps.cache-pack.outputs.cache-hit != 'true' id: cache-queries @@ -77,7 +79,7 @@ jobs: ql/target/release/ql-autobuilder.exe ql/target/release/ql-extractor ql/target/release/ql-extractor.exe - key: ${{ runner.os }}-extractor-${{ hashFiles('ql/**/Cargo.lock') }}-${{ hashFiles('ql/**/*.rs') }} + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-extractor-${{ hashFiles('ql/**/Cargo.lock') }}-${{ hashFiles('ql/**/*.rs') }} - name: Cache cargo if: steps.cache-extractor.outputs.cache-hit != 'true' && steps.cache-pack.outputs.cache-hit != 'true' uses: actions/cache@v3 @@ -86,7 +88,7 @@ jobs: ~/.cargo/registry ~/.cargo/git ql/target - key: ${{ runner.os }}-rust-cargo-${{ hashFiles('ql/**/Cargo.lock') }} + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-rust-cargo-${{ hashFiles('ql/**/Cargo.lock') }} - name: Check formatting if: steps.cache-extractor.outputs.cache-hit != 'true' && steps.cache-pack.outputs.cache-hit != 'true' run: cd ql; cargo fmt --all -- --check @@ -137,20 +139,20 @@ jobs: env: CONF: ./ql-for-ql-config.yml - name: Initialize CodeQL - uses: github/codeql-action/init@77a8d2d10c0b403a8b4aadbd223dc489ecd22683 + uses: github/codeql-action/init@45955cb1830b640e2c1603ad72ad542a49d47b96 with: languages: ql db-location: ${{ runner.temp }}/db config-file: ./ql-for-ql-config.yml tools: ${{ steps.find-latest-bundle.outputs.url }} - - name: Move pack cache + - name: Move pack queries run: | - cp -r ${PACK}/.cache ql/ql/src/.cache + cp -r ${PACK}/queries ql/ql/src env: PACK: ${{ runner.temp }}/pack - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@77a8d2d10c0b403a8b4aadbd223dc489ecd22683 + uses: github/codeql-action/analyze@45955cb1830b640e2c1603ad72ad542a49d47b96 with: category: "ql-for-ql" - name: Copy sarif file to CWD @@ -172,4 +174,4 @@ jobs: with: name: ql-for-ql-langs path: split-sarif - retention-days: 1 \ No newline at end of file + retention-days: 1 diff --git a/.github/workflows/ql-for-ql-dataset_measure.yml b/.github/workflows/ql-for-ql-dataset_measure.yml index 41f95a686ba..cf9820177fc 100644 --- a/.github/workflows/ql-for-ql-dataset_measure.yml +++ b/.github/workflows/ql-for-ql-dataset_measure.yml @@ -25,16 +25,18 @@ jobs: - name: Find codeql id: find-codeql - uses: github/codeql-action/init@77a8d2d10c0b403a8b4aadbd223dc489ecd22683 + uses: github/codeql-action/init@45955cb1830b640e2c1603ad72ad542a49d47b96 with: languages: javascript # does not matter + - uses: ./.github/actions/os-version + id: os_version - uses: actions/cache@v3 with: path: | ~/.cargo/registry ~/.cargo/git ql/target - key: ${{ runner.os }}-qltest-cargo-${{ hashFiles('ql/**/Cargo.lock') }} + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-qltest-cargo-${{ hashFiles('ql/**/Cargo.lock') }} - name: Build Extractor run: cd ql; env "PATH=$PATH:`dirname ${CODEQL}`" ./scripts/create-extractor-pack.sh env: diff --git a/.github/workflows/ql-for-ql-tests.yml b/.github/workflows/ql-for-ql-tests.yml index ce7963e8f79..d0196bcc961 100644 --- a/.github/workflows/ql-for-ql-tests.yml +++ b/.github/workflows/ql-for-ql-tests.yml @@ -22,28 +22,84 @@ jobs: - uses: actions/checkout@v3 - name: Find codeql id: find-codeql - uses: github/codeql-action/init@77a8d2d10c0b403a8b4aadbd223dc489ecd22683 + uses: github/codeql-action/init@45955cb1830b640e2c1603ad72ad542a49d47b96 with: languages: javascript # does not matter + - uses: ./.github/actions/os-version + id: os_version - uses: actions/cache@v3 with: path: | ~/.cargo/registry ~/.cargo/git ql/target - key: ${{ runner.os }}-qltest-cargo-${{ hashFiles('ql/**/Cargo.lock') }} + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-qltest-cargo-${{ hashFiles('ql/rust-toolchain.toml', 'ql/**/Cargo.lock') }} - name: Build extractor run: | cd ql; codeqlpath=$(dirname ${{ steps.find-codeql.outputs.codeql-path }}); env "PATH=$PATH:$codeqlpath" ./scripts/create-extractor-pack.sh + - name: Cache compilation cache + id: query-cache + uses: ./.github/actions/cache-query-compilation + with: + key: ql-for-ql-tests - name: Run QL tests run: | - "${CODEQL}" test run --check-databases --check-unused-labels --check-repeated-labels --check-redefined-labels --check-use-before-definition --search-path "${{ github.workspace }}/ql/extractor-pack" --consistency-queries ql/ql/consistency-queries ql/ql/test + "${CODEQL}" test run --check-databases --check-unused-labels --check-repeated-labels --check-redefined-labels --check-use-before-definition --search-path "${{ github.workspace }}/ql/extractor-pack" --consistency-queries ql/ql/consistency-queries --compilation-cache "${{ steps.query-cache.outputs.cache-dir }}" ql/ql/test env: CODEQL: ${{ steps.find-codeql.outputs.codeql-path }} - - name: Check QL formatting + + other-os: + strategy: + matrix: + os: [macos-latest, windows-latest] + needs: [qltest] + runs-on: ${{ matrix.os }} + steps: + - uses: actions/checkout@v3 + - name: Install GNU tar + if: runner.os == 'macOS' run: | - find ql/ql/src "(" -name "*.ql" -or -name "*.qll" ")" -print0 | xargs -0 "${CODEQL}" query format --check-only + brew install gnu-tar + echo "/usr/local/opt/gnu-tar/libexec/gnubin" >> $GITHUB_PATH + - name: Find codeql + id: find-codeql + uses: github/codeql-action/init@77a8d2d10c0b403a8b4aadbd223dc489ecd22683 + with: + languages: javascript # does not matter + - uses: ./.github/actions/os-version + id: os_version + - uses: actions/cache@v3 + with: + path: | + ~/.cargo/registry + ~/.cargo/git + ql/target + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-qltest-cargo-${{ hashFiles('ql/rust-toolchain.toml', 'ql/**/Cargo.lock') }} + - name: Build extractor + if: runner.os != 'Windows' + run: | + cd ql; + codeqlpath=$(dirname ${{ steps.find-codeql.outputs.codeql-path }}); + env "PATH=$PATH:$codeqlpath" ./scripts/create-extractor-pack.sh + - name: Build extractor (Windows) + if: runner.os == 'Windows' + shell: pwsh + run: | + cd ql; + $Env:PATH += ";$(dirname ${{ steps.find-codeql.outputs.codeql-path }})" + pwsh ./scripts/create-extractor-pack.ps1 + - name: Run a single QL tests - Unix + if: runner.os != 'Windows' + run: | + "${CODEQL}" test run --check-databases --search-path "${{ github.workspace }}/ql/extractor-pack" ql/ql/test/queries/style/DeadCode/DeadCode.qlref env: CODEQL: ${{ steps.find-codeql.outputs.codeql-path }} + - name: Run a single QL tests - Windows + if: runner.os == 'Windows' + shell: pwsh + run: | + $Env:PATH += ";$(dirname ${{ steps.find-codeql.outputs.codeql-path }})" + codeql test run --check-databases --search-path "${{ github.workspace }}/ql/extractor-pack" ql/ql/test/queries/style/DeadCode/DeadCode.qlref + \ No newline at end of file diff --git a/.github/workflows/ruby-build.yml b/.github/workflows/ruby-build.yml index e272f2ba319..bdb09bc9c7e 100644 --- a/.github/workflows/ruby-build.yml +++ b/.github/workflows/ruby-build.yml @@ -48,6 +48,8 @@ jobs: run: | brew install gnu-tar echo "/usr/local/opt/gnu-tar/libexec/gnubin" >> $GITHUB_PATH + - uses: ./.github/actions/os-version + id: os_version - name: Cache entire extractor uses: actions/cache@v3 id: cache-extractor @@ -58,7 +60,7 @@ jobs: ruby/target/release/ruby-extractor ruby/target/release/ruby-extractor.exe ruby/ql/lib/codeql/ruby/ast/internal/TreeSitter.qll - key: ${{ runner.os }}-ruby-extractor-${{ hashFiles('ruby/rust-toolchain.toml', 'ruby/**/Cargo.lock') }}--${{ hashFiles('ruby/**/*.rs') }} + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-ruby-extractor-${{ hashFiles('ruby/rust-toolchain.toml', 'ruby/**/Cargo.lock') }}--${{ hashFiles('ruby/**/*.rs') }} - uses: actions/cache@v3 if: steps.cache-extractor.outputs.cache-hit != 'true' with: @@ -66,7 +68,7 @@ jobs: ~/.cargo/registry ~/.cargo/git ruby/target - key: ${{ runner.os }}-ruby-rust-cargo-${{ hashFiles('ruby/rust-toolchain.toml', 'ruby/**/Cargo.lock') }} + key: ${{ runner.os }}-${{ steps.os_version.outputs.version }}-ruby-rust-cargo-${{ hashFiles('ruby/rust-toolchain.toml', 'ruby/**/Cargo.lock') }} - name: Check formatting if: steps.cache-extractor.outputs.cache-hit != 'true' run: cargo fmt --all -- --check @@ -203,11 +205,6 @@ jobs: - name: Fetch CodeQL uses: ./.github/actions/fetch-codeql - - uses: actions/checkout@v3 - with: - repository: Shopify/example-ruby-app - ref: 67a0decc5eb550f3a9228eda53925c3afd40dfe9 - - name: Download Ruby bundle uses: actions/download-artifact@v3 with: @@ -216,26 +213,15 @@ jobs: - name: Unzip Ruby bundle shell: bash run: unzip -q -d "${{ runner.temp }}/ruby-bundle" "${{ runner.temp }}/codeql-ruby-bundle.zip" - - name: Prepare test files - shell: bash - run: | - echo "import codeql.ruby.AST select count(File f)" > "test.ql" - echo "| 4 |" > "test.expected" - echo 'name: sample-tests - version: 0.0.0 - dependencies: - codeql/ruby-all: "*" - extractor: ruby - tests: . - ' > qlpack.yml + - name: Run QL test shell: bash run: | - codeql test run --search-path "${{ runner.temp }}/ruby-bundle" --additional-packs "${{ runner.temp }}/ruby-bundle" . + codeql test run --search-path "${{ runner.temp }}/ruby-bundle" --additional-packs "${{ runner.temp }}/ruby-bundle" ruby/ql/test/library-tests/ast/constants/ - name: Create database shell: bash run: | - codeql database create --search-path "${{ runner.temp }}/ruby-bundle" --language ruby --source-root . ../database + codeql database create --search-path "${{ runner.temp }}/ruby-bundle" --language ruby --source-root ruby/ql/test/library-tests/ast/constants/ ../database - name: Analyze database shell: bash run: | diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 0abd13bde5e..c97b2d96286 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -25,6 +25,7 @@ If you have an idea for a query that you would like to share with other CodeQL u Each language-specific directory contains further subdirectories that group queries based on their `@tags` or purpose. - Experimental queries and libraries are stored in the `experimental` subdirectory within each language-specific directory in the [CodeQL repository](https://github.com/github/codeql). For example, experimental Java queries and libraries are stored in `java/ql/src/experimental` and any corresponding tests in `java/ql/test/experimental`. + - Experimental queries need to include `experimental` in their `@tags` - The structure of an `experimental` subdirectory mirrors the structure of its parent directory. - Select or create an appropriate directory in `experimental` based on the existing directory structure of `experimental` or its parent directory. diff --git a/README.md b/README.md index a1a91f8e0af..57ecf54486c 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,8 @@ There is [extensive documentation](https://codeql.github.com/docs/) on getting s We welcome contributions to our standard library and standard checks. Do you have an idea for a new check, or how to improve an existing query? Then please go ahead and open a pull request! Before you do, though, please take the time to read our [contributing guidelines](CONTRIBUTING.md). You can also consult our [style guides](https://github.com/github/codeql/tree/main/docs) to learn how to format your code for consistency and clarity, how to write query metadata, and how to write query help documentation for your query. +For information on contributing to CodeQL documentation, see the "[contributing guide](docs/codeql/CONTRIBUTING.md)" for docs. + ## License The code in this repository is licensed under the [MIT License](LICENSE) by [GitHub](https://github.com). diff --git a/config/identical-files.json b/config/identical-files.json index 16c91a271ea..01876c35252 100644 --- a/config/identical-files.json +++ b/config/identical-files.json @@ -29,6 +29,7 @@ "csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplForContentDataFlow.qll", "go/ql/lib/semmle/go/dataflow/internal/DataFlowImpl.qll", "go/ql/lib/semmle/go/dataflow/internal/DataFlowImpl2.qll", + "go/ql/lib/semmle/go/dataflow/internal/DataFlowImplForStringsNewReplacer.qll", "python/ql/lib/semmle/python/dataflow/new/internal/DataFlowImpl.qll", "python/ql/lib/semmle/python/dataflow/new/internal/DataFlowImpl2.qll", "python/ql/lib/semmle/python/dataflow/new/internal/DataFlowImpl3.qll", diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 447df134409..6599212bcb6 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.5.1 + +No user-facing changes. + ## 0.5.0 ### Breaking Changes diff --git a/cpp/ql/lib/change-notes/released/0.5.1.md b/cpp/ql/lib/change-notes/released/0.5.1.md new file mode 100644 index 00000000000..0275d38f63c --- /dev/null +++ b/cpp/ql/lib/change-notes/released/0.5.1.md @@ -0,0 +1,3 @@ +## 0.5.1 + +No user-facing changes. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 30e271c5361..0bf7024c337 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.5.1 diff --git a/cpp/ql/lib/definitions.qll b/cpp/ql/lib/definitions.qll index 662cb5ed877..1eee3804359 100644 --- a/cpp/ql/lib/definitions.qll +++ b/cpp/ql/lib/definitions.qll @@ -123,6 +123,13 @@ private predicate constructorCallTypeMention(ConstructorCall cc, TypeMention tm) ) } +/** Holds if `loc` has the container `container` and is on the line starting at `startLine`. */ +pragma[nomagic] +private predicate hasContainerAndStartLine(Location loc, Container container, int startLine) { + loc.getStartLine() = startLine and + loc.getContainer() = container +} + /** * Gets an element, of kind `kind`, that element `e` uses, if any. * Attention: This predicate yields multiple definitions for a single location. @@ -184,11 +191,9 @@ Top definitionOf(Top e, string kind) { kind = "I" and result = e.(Include).getIncludedFile() and // exclude `#include` directives containing macros - not exists(MacroInvocation mi, Location l1, Location l2 | - l1 = e.(Include).getLocation() and - l2 = mi.getLocation() and - l1.getContainer() = l2.getContainer() and - l1.getStartLine() = l2.getStartLine() + not exists(MacroInvocation mi, Container container, int startLine | + hasContainerAndStartLine(e.(Include).getLocation(), container, startLine) and + hasContainerAndStartLine(mi.getLocation(), container, startLine) // (an #include directive must be always on it's own line) ) ) and diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll index 533899e8a85..9bbc70fbdf9 100644 --- a/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll +++ b/cpp/ql/lib/experimental/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll @@ -45,6 +45,16 @@ module Consistency { ) { none() } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodeAtPosition`. */ + predicate uniqueParameterNodeAtPositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodePosition`. */ + predicate uniqueParameterNodePositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } } private class RelevantNode extends Node { @@ -246,6 +256,7 @@ module Consistency { query predicate uniqueParameterNodeAtPosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodeAtPositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(Node p0 | isParameterNode(p0, c, pos))) and msg = "Parameters with overlapping positions." @@ -254,6 +265,7 @@ module Consistency { query predicate uniqueParameterNodePosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodePositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(ParameterPosition pos0 | isParameterNode(p, c, pos0))) and msg = "Parameter node with multiple positions." diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/FloatDelta.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/FloatDelta.qll new file mode 100644 index 00000000000..b55eec5e5ad --- /dev/null +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/FloatDelta.qll @@ -0,0 +1,29 @@ +private import RangeAnalysisStage + +module FloatDelta implements DeltaSig { + class Delta = float; + + bindingset[d] + bindingset[result] + float toFloat(Delta d) { result = d } + + bindingset[d] + bindingset[result] + int toInt(Delta d) { result = d } + + bindingset[n] + bindingset[result] + Delta fromInt(int n) { result = n } + + bindingset[f] + Delta fromFloat(float f) { + result = + min(float diff, float res | + diff = (res - f) and res = f.ceil() + or + diff = (f - res) and res = f.floor() + | + res order by diff + ) + } +} diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/ModulusAnalysis.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/ModulusAnalysis.qll index 8f26e85edbd..acb5436e9c9 100644 --- a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/ModulusAnalysis.qll +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/ModulusAnalysis.qll @@ -14,321 +14,328 @@ private import ModulusAnalysisSpecific::Private private import experimental.semmle.code.cpp.semantic.Semantic private import ConstantAnalysis private import RangeUtils +private import RangeAnalysisStage -/** - * Holds if `e + delta` equals `v` at `pos`. - */ -private predicate valueFlowStepSsa(SemSsaVariable v, SemSsaReadPosition pos, SemExpr e, int delta) { - semSsaUpdateStep(v, e, delta) and pos.hasReadOfVar(v) - or - exists(SemGuard guard, boolean testIsTrue | - pos.hasReadOfVar(v) and - guard = semEqFlowCond(v, e, delta, true, testIsTrue) and - semGuardDirectlyControlsSsaRead(guard, pos, testIsTrue) - ) -} - -/** - * Holds if `add` is the addition of `larg` and `rarg`, neither of which are - * `ConstantIntegerExpr`s. - */ -private predicate nonConstAddition(SemExpr add, SemExpr larg, SemExpr rarg) { - exists(SemAddExpr a | a = add | - larg = a.getLeftOperand() and - rarg = a.getRightOperand() - ) and - not larg instanceof SemConstantIntegerExpr and - not rarg instanceof SemConstantIntegerExpr -} - -/** - * Holds if `sub` is the subtraction of `larg` and `rarg`, where `rarg` is not - * a `ConstantIntegerExpr`. - */ -private predicate nonConstSubtraction(SemExpr sub, SemExpr larg, SemExpr rarg) { - exists(SemSubExpr s | s = sub | - larg = s.getLeftOperand() and - rarg = s.getRightOperand() - ) and - not rarg instanceof SemConstantIntegerExpr -} - -/** Gets an expression that is the remainder modulo `mod` of `arg`. */ -private SemExpr modExpr(SemExpr arg, int mod) { - exists(SemRemExpr rem | - result = rem and - arg = rem.getLeftOperand() and - rem.getRightOperand().(SemConstantIntegerExpr).getIntValue() = mod and - mod >= 2 - ) - or - exists(SemConstantIntegerExpr c | - mod = 2.pow([1 .. 30]) and - c.getIntValue() = mod - 1 and - result.(SemBitAndExpr).hasOperands(arg, c) - ) -} - -/** - * Gets a guard that tests whether `v` is congruent with `val` modulo `mod` on - * its `testIsTrue` branch. - */ -private SemGuard moduloCheck(SemSsaVariable v, int val, int mod, boolean testIsTrue) { - exists(SemExpr rem, SemConstantIntegerExpr c, int r, boolean polarity | - result.isEquality(rem, c, polarity) and - c.getIntValue() = r and - rem = modExpr(v.getAUse(), mod) and - ( - testIsTrue = polarity and val = r - or - testIsTrue = polarity.booleanNot() and - mod = 2 and - val = 1 - r and - (r = 0 or r = 1) - ) - ) -} - -/** - * Holds if a guard ensures that `v` at `pos` is congruent with `val` modulo `mod`. - */ -private predicate moduloGuardedRead(SemSsaVariable v, SemSsaReadPosition pos, int val, int mod) { - exists(SemGuard guard, boolean testIsTrue | - pos.hasReadOfVar(v) and - guard = moduloCheck(v, val, mod, testIsTrue) and - semGuardControlsSsaRead(guard, pos, testIsTrue) - ) -} - -/** Holds if `factor` is a power of 2 that divides `mask`. */ -bindingset[mask] -private predicate andmaskFactor(int mask, int factor) { - mask % factor = 0 and - factor = 2.pow([1 .. 30]) -} - -/** Holds if `e` is evenly divisible by `factor`. */ -private predicate evenlyDivisibleExpr(SemExpr e, int factor) { - exists(SemConstantIntegerExpr c, int k | k = c.getIntValue() | - e.(SemMulExpr).getAnOperand() = c and factor = k.abs() and factor >= 2 - or - e.(SemShiftLeftExpr).getRightOperand() = c and factor = 2.pow(k) and k > 0 - or - e.(SemBitAndExpr).getAnOperand() = c and factor = max(int f | andmaskFactor(k, f)) - ) -} - -/** - * Holds if `rix` is the number of input edges to `phi`. - */ -private predicate maxPhiInputRank(SemSsaPhiNode phi, int rix) { - rix = max(int r | rankedPhiInput(phi, _, _, r)) -} - -/** - * Gets the remainder of `val` modulo `mod`. - * - * For `mod = 0` the result equals `val` and for `mod > 1` the result is within - * the range `[0 .. mod-1]`. - */ -bindingset[val, mod] -private int remainder(int val, int mod) { - mod = 0 and result = val - or - mod > 1 and result = ((val % mod) + mod) % mod -} - -/** - * Holds if `inp` is an input to `phi` and equals `phi` modulo `mod` along `edge`. - */ -private predicate phiSelfModulus( - SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, int mod -) { - exists(SemSsaBound phibound, int v, int m | - edge.phiInput(phi, inp) and - phibound.getAVariable() = phi and - ssaModulus(inp, edge, phibound, v, m) and - mod = m.gcd(v) and - mod != 1 - ) -} - -/** - * Holds if `b + val` modulo `mod` is a candidate congruence class for `phi`. - */ -private predicate phiModulusInit(SemSsaPhiNode phi, SemBound b, int val, int mod) { - exists(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge | - edge.phiInput(phi, inp) and - ssaModulus(inp, edge, b, val, mod) - ) -} - -/** - * Holds if all inputs to `phi` numbered `1` to `rix` are equal to `b + val` modulo `mod`. - */ -pragma[nomagic] -private predicate phiModulusRankStep(SemSsaPhiNode phi, SemBound b, int val, int mod, int rix) { - /* - * base case. If any phi input is equal to `b + val` modulo `mod`, that's a potential congruence - * class for the phi node. +module ModulusAnalysis Bounds, UtilSig U> { + /** + * Holds if `e + delta` equals `v` at `pos`. */ + private predicate valueFlowStepSsa(SemSsaVariable v, SemSsaReadPosition pos, SemExpr e, int delta) { + U::semSsaUpdateStep(v, e, D::fromInt(delta)) and pos.hasReadOfVar(v) + or + exists(SemGuard guard, boolean testIsTrue | + pos.hasReadOfVar(v) and + guard = U::semEqFlowCond(v, e, D::fromInt(delta), true, testIsTrue) and + semGuardDirectlyControlsSsaRead(guard, pos, testIsTrue) + ) + } - rix = 0 and - phiModulusInit(phi, b, val, mod) - or - exists(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, int v1, int m1 | - mod != 1 and - val = remainder(v1, mod) - | + /** + * Holds if `add` is the addition of `larg` and `rarg`, neither of which are + * `ConstantIntegerExpr`s. + */ + private predicate nonConstAddition(SemExpr add, SemExpr larg, SemExpr rarg) { + exists(SemAddExpr a | a = add | + larg = a.getLeftOperand() and + rarg = a.getRightOperand() + ) and + not larg instanceof SemConstantIntegerExpr and + not rarg instanceof SemConstantIntegerExpr + } + + /** + * Holds if `sub` is the subtraction of `larg` and `rarg`, where `rarg` is not + * a `ConstantIntegerExpr`. + */ + private predicate nonConstSubtraction(SemExpr sub, SemExpr larg, SemExpr rarg) { + exists(SemSubExpr s | s = sub | + larg = s.getLeftOperand() and + rarg = s.getRightOperand() + ) and + not rarg instanceof SemConstantIntegerExpr + } + + /** Gets an expression that is the remainder modulo `mod` of `arg`. */ + private SemExpr modExpr(SemExpr arg, int mod) { + exists(SemRemExpr rem | + result = rem and + arg = rem.getLeftOperand() and + rem.getRightOperand().(SemConstantIntegerExpr).getIntValue() = mod and + mod >= 2 + ) + or + exists(SemConstantIntegerExpr c | + mod = 2.pow([1 .. 30]) and + c.getIntValue() = mod - 1 and + result.(SemBitAndExpr).hasOperands(arg, c) + ) + } + + /** + * Gets a guard that tests whether `v` is congruent with `val` modulo `mod` on + * its `testIsTrue` branch. + */ + private SemGuard moduloCheck(SemSsaVariable v, int val, int mod, boolean testIsTrue) { + exists(SemExpr rem, SemConstantIntegerExpr c, int r, boolean polarity | + result.isEquality(rem, c, polarity) and + c.getIntValue() = r and + rem = modExpr(v.getAUse(), mod) and + ( + testIsTrue = polarity and val = r + or + testIsTrue = polarity.booleanNot() and + mod = 2 and + val = 1 - r and + (r = 0 or r = 1) + ) + ) + } + + /** + * Holds if a guard ensures that `v` at `pos` is congruent with `val` modulo `mod`. + */ + private predicate moduloGuardedRead(SemSsaVariable v, SemSsaReadPosition pos, int val, int mod) { + exists(SemGuard guard, boolean testIsTrue | + pos.hasReadOfVar(v) and + guard = moduloCheck(v, val, mod, testIsTrue) and + semGuardControlsSsaRead(guard, pos, testIsTrue) + ) + } + + /** Holds if `factor` is a power of 2 that divides `mask`. */ + bindingset[mask] + private predicate andmaskFactor(int mask, int factor) { + mask % factor = 0 and + factor = 2.pow([1 .. 30]) + } + + /** Holds if `e` is evenly divisible by `factor`. */ + private predicate evenlyDivisibleExpr(SemExpr e, int factor) { + exists(SemConstantIntegerExpr c, int k | k = c.getIntValue() | + e.(SemMulExpr).getAnOperand() = c and factor = k.abs() and factor >= 2 + or + e.(SemShiftLeftExpr).getRightOperand() = c and factor = 2.pow(k) and k > 0 + or + e.(SemBitAndExpr).getAnOperand() = c and factor = max(int f | andmaskFactor(k, f)) + ) + } + + /** + * Holds if `rix` is the number of input edges to `phi`. + */ + private predicate maxPhiInputRank(SemSsaPhiNode phi, int rix) { + rix = max(int r | rankedPhiInput(phi, _, _, r)) + } + + /** + * Gets the remainder of `val` modulo `mod`. + * + * For `mod = 0` the result equals `val` and for `mod > 1` the result is within + * the range `[0 .. mod-1]`. + */ + bindingset[val, mod] + private int remainder(int val, int mod) { + mod = 0 and result = val + or + mod > 1 and result = ((val % mod) + mod) % mod + } + + /** + * Holds if `inp` is an input to `phi` and equals `phi` modulo `mod` along `edge`. + */ + private predicate phiSelfModulus( + SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, int mod + ) { + exists(Bounds::SemSsaBound phibound, int v, int m | + edge.phiInput(phi, inp) and + phibound.getAVariable() = phi and + ssaModulus(inp, edge, phibound, v, m) and + mod = m.gcd(v) and + mod != 1 + ) + } + + /** + * Holds if `b + val` modulo `mod` is a candidate congruence class for `phi`. + */ + private predicate phiModulusInit(SemSsaPhiNode phi, Bounds::SemBound b, int val, int mod) { + exists(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge | + edge.phiInput(phi, inp) and + ssaModulus(inp, edge, b, val, mod) + ) + } + + /** + * Holds if all inputs to `phi` numbered `1` to `rix` are equal to `b + val` modulo `mod`. + */ + pragma[nomagic] + private predicate phiModulusRankStep( + SemSsaPhiNode phi, Bounds::SemBound b, int val, int mod, int rix + ) { /* - * Recursive case. If `inp` = `b + v2` mod `m2`, we combine that with the preceding potential - * congruence class `b + v1` mod `m1`. The result will be the congruence class of `v1` modulo - * the greatest common denominator of `m1`, `m2`, and `v1 - v2`. + * base case. If any phi input is equal to `b + val` modulo `mod`, that's a potential congruence + * class for the phi node. */ - exists(int v2, int m2 | - rankedPhiInput(pragma[only_bind_out](phi), inp, edge, rix) and - phiModulusRankStep(phi, b, v1, m1, rix - 1) and - ssaModulus(inp, edge, b, v2, m2) and - mod = m1.gcd(m2).gcd(v1 - v2) + rix = 0 and + phiModulusInit(phi, b, val, mod) + or + exists(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, int v1, int m1 | + mod != 1 and + val = remainder(v1, mod) + | + /* + * Recursive case. If `inp` = `b + v2` mod `m2`, we combine that with the preceding potential + * congruence class `b + v1` mod `m1`. The result will be the congruence class of `v1` modulo + * the greatest common denominator of `m1`, `m2`, and `v1 - v2`. + */ + + exists(int v2, int m2 | + rankedPhiInput(pragma[only_bind_out](phi), inp, edge, rix) and + phiModulusRankStep(phi, b, v1, m1, rix - 1) and + ssaModulus(inp, edge, b, v2, m2) and + mod = m1.gcd(m2).gcd(v1 - v2) + ) + or + /* + * Recursive case. If `inp` = `phi` mod `m2`, we combine that with the preceding potential + * congruence class `b + v1` mod `m1`. The result will be a congruence class modulo the greatest + * common denominator of `m1` and `m2`. + */ + + exists(int m2 | + rankedPhiInput(phi, inp, edge, rix) and + phiModulusRankStep(phi, b, v1, m1, rix - 1) and + phiSelfModulus(phi, inp, edge, m2) and + mod = m1.gcd(m2) + ) ) - or - /* - * Recursive case. If `inp` = `phi` mod `m2`, we combine that with the preceding potential - * congruence class `b + v1` mod `m1`. The result will be a congruence class modulo the greatest - * common denominator of `m1` and `m2`. - */ + } - exists(int m2 | - rankedPhiInput(phi, inp, edge, rix) and - phiModulusRankStep(phi, b, v1, m1, rix - 1) and - phiSelfModulus(phi, inp, edge, m2) and - mod = m1.gcd(m2) + /** + * Holds if `phi` is equal to `b + val` modulo `mod`. + */ + private predicate phiModulus(SemSsaPhiNode phi, Bounds::SemBound b, int val, int mod) { + exists(int r | + maxPhiInputRank(phi, r) and + phiModulusRankStep(phi, b, val, mod, r) ) - ) -} + } -/** - * Holds if `phi` is equal to `b + val` modulo `mod`. - */ -private predicate phiModulus(SemSsaPhiNode phi, SemBound b, int val, int mod) { - exists(int r | - maxPhiInputRank(phi, r) and - phiModulusRankStep(phi, b, val, mod, r) - ) -} - -/** - * Holds if `v` at `pos` is equal to `b + val` modulo `mod`. - */ -private predicate ssaModulus(SemSsaVariable v, SemSsaReadPosition pos, SemBound b, int val, int mod) { - phiModulus(v, b, val, mod) and pos.hasReadOfVar(v) - or - b.(SemSsaBound).getAVariable() = v and pos.hasReadOfVar(v) and val = 0 and mod = 0 - or - exists(SemExpr e, int val0, int delta | - semExprModulus(e, b, val0, mod) and - valueFlowStepSsa(v, pos, e, delta) and - val = remainder(val0 + delta, mod) - ) - or - moduloGuardedRead(v, pos, val, mod) and b instanceof SemZeroBound -} - -/** - * Holds if `e` is equal to `b + val` modulo `mod`. - * - * There are two cases for the modulus: - * - `mod = 0`: The equality `e = b + val` is an ordinary equality. - * - `mod > 1`: `val` lies within the range `[0 .. mod-1]`. - */ -cached -predicate semExprModulus(SemExpr e, SemBound b, int val, int mod) { - not ignoreExprModulus(e) and - ( - e = b.getExpr(val) and mod = 0 + /** + * Holds if `v` at `pos` is equal to `b + val` modulo `mod`. + */ + private predicate ssaModulus( + SemSsaVariable v, SemSsaReadPosition pos, Bounds::SemBound b, int val, int mod + ) { + phiModulus(v, b, val, mod) and pos.hasReadOfVar(v) or - evenlyDivisibleExpr(e, mod) and - val = 0 and - b instanceof SemZeroBound + b.(Bounds::SemSsaBound).getAVariable() = v and pos.hasReadOfVar(v) and val = 0 and mod = 0 or - exists(SemSsaVariable v, SemSsaReadPositionBlock bb | - ssaModulus(v, bb, b, val, mod) and - e = v.getAUse() and - bb.getAnExpr() = e - ) - or - exists(SemExpr mid, int val0, int delta | - semExprModulus(mid, b, val0, mod) and - semValueFlowStep(e, mid, delta) and + exists(SemExpr e, int val0, int delta | + semExprModulus(e, b, val0, mod) and + valueFlowStepSsa(v, pos, e, delta) and val = remainder(val0 + delta, mod) ) or - exists(SemConditionalExpr cond, int v1, int v2, int m1, int m2 | - cond = e and - condExprBranchModulus(cond, true, b, v1, m1) and - condExprBranchModulus(cond, false, b, v2, m2) and - mod = m1.gcd(m2).gcd(v1 - v2) and - mod != 1 and - val = remainder(v1, mod) - ) - or - exists(SemBound b1, SemBound b2, int v1, int v2, int m1, int m2 | - addModulus(e, true, b1, v1, m1) and - addModulus(e, false, b2, v2, m2) and - mod = m1.gcd(m2) and - mod != 1 and - val = remainder(v1 + v2, mod) - | - b = b1 and b2 instanceof SemZeroBound + moduloGuardedRead(v, pos, val, mod) and b instanceof Bounds::SemZeroBound + } + + /** + * Holds if `e` is equal to `b + val` modulo `mod`. + * + * There are two cases for the modulus: + * - `mod = 0`: The equality `e = b + val` is an ordinary equality. + * - `mod > 1`: `val` lies within the range `[0 .. mod-1]`. + */ + cached + predicate semExprModulus(SemExpr e, Bounds::SemBound b, int val, int mod) { + not ignoreExprModulus(e) and + ( + e = b.getExpr(D::fromInt(val)) and mod = 0 or - b = b2 and b1 instanceof SemZeroBound + evenlyDivisibleExpr(e, mod) and + val = 0 and + b instanceof Bounds::SemZeroBound + or + exists(SemSsaVariable v, SemSsaReadPositionBlock bb | + ssaModulus(v, bb, b, val, mod) and + e = v.getAUse() and + bb.getAnExpr() = e + ) + or + exists(SemExpr mid, int val0, int delta | + semExprModulus(mid, b, val0, mod) and + U::semValueFlowStep(e, mid, D::fromInt(delta)) and + val = remainder(val0 + delta, mod) + ) + or + exists(SemConditionalExpr cond, int v1, int v2, int m1, int m2 | + cond = e and + condExprBranchModulus(cond, true, b, v1, m1) and + condExprBranchModulus(cond, false, b, v2, m2) and + mod = m1.gcd(m2).gcd(v1 - v2) and + mod != 1 and + val = remainder(v1, mod) + ) + or + exists(Bounds::SemBound b1, Bounds::SemBound b2, int v1, int v2, int m1, int m2 | + addModulus(e, true, b1, v1, m1) and + addModulus(e, false, b2, v2, m2) and + mod = m1.gcd(m2) and + mod != 1 and + val = remainder(v1 + v2, mod) + | + b = b1 and b2 instanceof Bounds::SemZeroBound + or + b = b2 and b1 instanceof Bounds::SemZeroBound + ) + or + exists(int v1, int v2, int m1, int m2 | + subModulus(e, true, b, v1, m1) and + subModulus(e, false, any(Bounds::SemZeroBound zb), v2, m2) and + mod = m1.gcd(m2) and + mod != 1 and + val = remainder(v1 - v2, mod) + ) ) - or - exists(int v1, int v2, int m1, int m2 | - subModulus(e, true, b, v1, m1) and - subModulus(e, false, any(SemZeroBound zb), v2, m2) and - mod = m1.gcd(m2) and - mod != 1 and - val = remainder(v1 - v2, mod) + } + + private predicate condExprBranchModulus( + SemConditionalExpr cond, boolean branch, Bounds::SemBound b, int val, int mod + ) { + semExprModulus(cond.getBranchExpr(branch), b, val, mod) + } + + private predicate addModulus(SemExpr add, boolean isLeft, Bounds::SemBound b, int val, int mod) { + exists(SemExpr larg, SemExpr rarg | nonConstAddition(add, larg, rarg) | + semExprModulus(larg, b, val, mod) and isLeft = true + or + semExprModulus(rarg, b, val, mod) and isLeft = false ) - ) -} + } -private predicate condExprBranchModulus( - SemConditionalExpr cond, boolean branch, SemBound b, int val, int mod -) { - semExprModulus(cond.getBranchExpr(branch), b, val, mod) -} - -private predicate addModulus(SemExpr add, boolean isLeft, SemBound b, int val, int mod) { - exists(SemExpr larg, SemExpr rarg | nonConstAddition(add, larg, rarg) | - semExprModulus(larg, b, val, mod) and isLeft = true - or - semExprModulus(rarg, b, val, mod) and isLeft = false - ) -} - -private predicate subModulus(SemExpr sub, boolean isLeft, SemBound b, int val, int mod) { - exists(SemExpr larg, SemExpr rarg | nonConstSubtraction(sub, larg, rarg) | - semExprModulus(larg, b, val, mod) and isLeft = true - or - semExprModulus(rarg, b, val, mod) and isLeft = false - ) -} - -/** - * Holds if `inp` is an input to `phi` along `edge` and this input has index `r` - * in an arbitrary 1-based numbering of the input edges to `phi`. - */ -private predicate rankedPhiInput( - SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, int r -) { - edge.phiInput(phi, inp) and - edge = - rank[r](SemSsaReadPositionPhiInputEdge e | - e.phiInput(phi, _) - | - e order by e.getOrigBlock().getUniqueId() + private predicate subModulus(SemExpr sub, boolean isLeft, Bounds::SemBound b, int val, int mod) { + exists(SemExpr larg, SemExpr rarg | nonConstSubtraction(sub, larg, rarg) | + semExprModulus(larg, b, val, mod) and isLeft = true + or + semExprModulus(rarg, b, val, mod) and isLeft = false ) + } + + /** + * Holds if `inp` is an input to `phi` along `edge` and this input has index `r` + * in an arbitrary 1-based numbering of the input edges to `phi`. + */ + private predicate rankedPhiInput( + SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, int r + ) { + edge.phiInput(phi, inp) and + edge = + rank[r](SemSsaReadPositionPhiInputEdge e | + e.phiInput(phi, _) + | + e order by e.getOrigBlock().getUniqueId() + ) + } } diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll index cbfe6bfdf06..50d604dee97 100644 --- a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysis.qll @@ -1,830 +1,24 @@ -/** - * Provides classes and predicates for range analysis. - * - * An inferred bound can either be a specific integer, the abstract value of an - * SSA variable, or the abstract value of an interesting expression. The latter - * category includes array lengths that are not SSA variables. - * - * If an inferred bound relies directly on a condition, then this condition is - * reported as the reason for the bound. - */ - -/* - * This library tackles range analysis as a flow problem. Consider e.g.: - * ``` - * len = arr.length; - * if (x < len) { ... y = x-1; ... y ... } - * ``` - * In this case we would like to infer `y <= arr.length - 2`, and this is - * accomplished by tracking the bound through a sequence of steps: - * ``` - * arr.length --> len = .. --> x < len --> x-1 --> y = .. --> y - * ``` - * - * In its simplest form the step relation `E1 --> E2` relates two expressions - * such that `E1 <= B` implies `E2 <= B` for any `B` (with a second separate - * step relation handling lower bounds). Examples of such steps include - * assignments `E2 = E1` and conditions `x <= E1` where `E2` is a use of `x` - * guarded by the condition. - * - * In order to handle subtractions and additions with constants, and strict - * comparisons, the step relation is augmented with an integer delta. With this - * generalization `E1 --(delta)--> E2` relates two expressions and an integer - * such that `E1 <= B` implies `E2 <= B + delta` for any `B`. This corresponds - * to the predicate `boundFlowStep`. - * - * The complete range analysis is then implemented as the transitive closure of - * the step relation summing the deltas along the way. If `E1` transitively - * steps to `E2`, `delta` is the sum of deltas along the path, and `B` is an - * interesting bound equal to the value of `E1` then `E2 <= B + delta`. This - * corresponds to the predicate `bounded`. - * - * Phi nodes need a little bit of extra handling. Consider `x0 = phi(x1, x2)`. - * There are essentially two cases: - * - If `x1 <= B + d1` and `x2 <= B + d2` then `x0 <= B + max(d1,d2)`. - * - If `x1 <= B + d1` and `x2 <= x0 + d2` with `d2 <= 0` then `x0 <= B + d1`. - * The first case is for whenever a bound can be proven without taking looping - * into account. The second case is relevant when `x2` comes from a back-edge - * where we can prove that the variable has been non-increasing through the - * loop-iteration as this means that any upper bound that holds prior to the - * loop also holds for the variable during the loop. - * This generalizes to a phi node with `n` inputs, so if - * `x0 = phi(x1, ..., xn)` and `xi <= B + delta` for one of the inputs, then we - * also have `x0 <= B + delta` if we can prove either: - * - `xj <= B + d` with `d <= delta` or - * - `xj <= x0 + d` with `d <= 0` - * for each input `xj`. - * - * As all inferred bounds can be related directly to a path in the source code - * the only source of non-termination is if successive redundant (and thereby - * increasingly worse) bounds are calculated along a loop in the source code. - * We prevent this by weakening the bound to a small finite set of bounds when - * a path follows a second back-edge (we postpone weakening till the second - * back-edge as a precise bound might require traversing a loop once). - */ - -private import RangeAnalysisSpecific as Specific +private import RangeAnalysisStage +private import RangeAnalysisSpecific +private import experimental.semmle.code.cpp.semantic.analysis.FloatDelta private import RangeUtils -private import SignAnalysisCommon -private import ModulusAnalysis -private import experimental.semmle.code.cpp.semantic.Semantic -private import ConstantAnalysis +private import experimental.semmle.code.cpp.semantic.SemanticBound as SemanticBound -cached -private module RangeAnalysisCache { - cached - module RangeAnalysisPublic { - /** - * Holds if `b + delta` is a valid bound for `e`. - * - `upper = true` : `e <= b + delta` - * - `upper = false` : `e >= b + delta` - * - * The reason for the bound is given by `reason` and may be either a condition - * or `NoReason` if the bound was proven directly without the use of a bounding - * condition. - */ - cached - predicate semBounded(SemExpr e, SemBound b, int delta, boolean upper, SemReason reason) { - bounded(e, b, delta, upper, _, _, reason) and - bestBound(e, b, delta, upper) - } +module Bounds implements BoundSig { + class SemBound instanceof SemanticBound::SemBound { + string toString() { result = super.toString() } + + SemExpr getExpr(float delta) { result = super.getExpr(delta) } } - /** - * Holds if `guard = boundFlowCond(_, _, _, _, _) or guard = eqFlowCond(_, _, _, _, _)`. - */ - cached - predicate possibleReason(SemGuard guard) { - guard = boundFlowCond(_, _, _, _, _) or guard = semEqFlowCond(_, _, _, _, _) + class SemZeroBound extends SemBound instanceof SemanticBound::SemZeroBound { } + + class SemSsaBound extends SemBound instanceof SemanticBound::SemSsaBound { + SemSsaVariable getAVariable() { result = this.(SemanticBound::SemSsaBound).getAVariable() } } } -private import RangeAnalysisCache -import RangeAnalysisPublic +private module CppRangeAnalysis = + RangeStage>; -/** - * Holds if `b + delta` is a valid bound for `e` and this is the best such delta. - * - `upper = true` : `e <= b + delta` - * - `upper = false` : `e >= b + delta` - */ -private predicate bestBound(SemExpr e, SemBound b, int delta, boolean upper) { - delta = min(int d | bounded(e, b, d, upper, _, _, _)) and upper = true - or - delta = max(int d | bounded(e, b, d, upper, _, _, _)) and upper = false -} - -/** - * Holds if `comp` corresponds to: - * - `upper = true` : `v <= e + delta` or `v < e + delta` - * - `upper = false` : `v >= e + delta` or `v > e + delta` - */ -private predicate boundCondition( - SemRelationalExpr comp, SemSsaVariable v, SemExpr e, int delta, boolean upper -) { - comp.getLesserOperand() = semSsaRead(v, delta) and e = comp.getGreaterOperand() and upper = true - or - comp.getGreaterOperand() = semSsaRead(v, delta) and e = comp.getLesserOperand() and upper = false - or - exists(SemSubExpr sub, SemConstantIntegerExpr c, int d | - // (v - d) - e < c - comp.getLesserOperand() = sub and - comp.getGreaterOperand() = c and - sub.getLeftOperand() = semSsaRead(v, d) and - sub.getRightOperand() = e and - upper = true and - delta = d + c.getIntValue() - or - // (v - d) - e > c - comp.getGreaterOperand() = sub and - comp.getLesserOperand() = c and - sub.getLeftOperand() = semSsaRead(v, d) and - sub.getRightOperand() = e and - upper = false and - delta = d + c.getIntValue() - or - // e - (v - d) < c - comp.getLesserOperand() = sub and - comp.getGreaterOperand() = c and - sub.getLeftOperand() = e and - sub.getRightOperand() = semSsaRead(v, d) and - upper = false and - delta = d - c.getIntValue() - or - // e - (v - d) > c - comp.getGreaterOperand() = sub and - comp.getLesserOperand() = c and - sub.getLeftOperand() = e and - sub.getRightOperand() = semSsaRead(v, d) and - upper = true and - delta = d - c.getIntValue() - ) -} - -/** - * Holds if `comp` is a comparison between `x` and `y` for which `y - x` has a - * fixed value modulo some `mod > 1`, such that the comparison can be - * strengthened by `strengthen` when evaluating to `testIsTrue`. - */ -private predicate modulusComparison(SemRelationalExpr comp, boolean testIsTrue, int strengthen) { - exists( - SemBound b, int v1, int v2, int mod1, int mod2, int mod, boolean resultIsStrict, int d, int k - | - // If `x <= y` and `x =(mod) b + v1` and `y =(mod) b + v2` then - // `0 <= y - x =(mod) v2 - v1`. By choosing `k =(mod) v2 - v1` with - // `0 <= k < mod` we get `k <= y - x`. If the resulting comparison is - // strict then the strengthening amount is instead `k - 1` modulo `mod`: - // `x < y` means `0 <= y - x - 1 =(mod) k - 1` so `k - 1 <= y - x - 1` and - // thus `k - 1 < y - x` with `0 <= k - 1 < mod`. - semExprModulus(comp.getLesserOperand(), b, v1, mod1) and - semExprModulus(comp.getGreaterOperand(), b, v2, mod2) and - mod = mod1.gcd(mod2) and - mod != 1 and - (testIsTrue = true or testIsTrue = false) and - ( - if comp.isStrict() - then resultIsStrict = testIsTrue - else resultIsStrict = testIsTrue.booleanNot() - ) and - ( - resultIsStrict = true and d = 1 - or - resultIsStrict = false and d = 0 - ) and - ( - testIsTrue = true and k = v2 - v1 - or - testIsTrue = false and k = v1 - v2 - ) and - strengthen = (((k - d) % mod) + mod) % mod - ) -} - -/** - * Gets a condition that tests whether `v` is bounded by `e + delta`. - * - * If the condition evaluates to `testIsTrue`: - * - `upper = true` : `v <= e + delta` - * - `upper = false` : `v >= e + delta` - */ -private SemGuard boundFlowCond( - SemSsaVariable v, SemExpr e, int delta, boolean upper, boolean testIsTrue -) { - exists( - SemRelationalExpr comp, int d1, int d2, int d3, int strengthen, boolean compIsUpper, - boolean resultIsStrict - | - comp = result.asExpr() and - boundCondition(comp, v, e, d1, compIsUpper) and - (testIsTrue = true or testIsTrue = false) and - upper = compIsUpper.booleanXor(testIsTrue.booleanNot()) and - ( - if comp.isStrict() - then resultIsStrict = testIsTrue - else resultIsStrict = testIsTrue.booleanNot() - ) and - ( - if - getTrackedTypeForSsaVariable(v) instanceof SemIntegerType or - getTrackedTypeForSsaVariable(v) instanceof SemAddressType - then - upper = true and strengthen = -1 - or - upper = false and strengthen = 1 - else strengthen = 0 - ) and - ( - exists(int k | modulusComparison(comp, testIsTrue, k) and d2 = strengthen * k) - or - not modulusComparison(comp, testIsTrue, _) and d2 = 0 - ) and - // A strict inequality `x < y` can be strengthened to `x <= y - 1`. - ( - resultIsStrict = true and d3 = strengthen - or - resultIsStrict = false and d3 = 0 - ) and - delta = d1 + d2 + d3 - ) - or - exists(boolean testIsTrue0 | - semImplies_v2(result, testIsTrue, boundFlowCond(v, e, delta, upper, testIsTrue0), testIsTrue0) - ) - or - result = semEqFlowCond(v, e, delta, true, testIsTrue) and - (upper = true or upper = false) - or - // guard that tests whether `v2` is bounded by `e + delta + d1 - d2` and - // exists a guard `guardEq` such that `v = v2 - d1 + d2`. - exists(SemSsaVariable v2, SemGuard guardEq, boolean eqIsTrue, int d1, int d2 | - guardEq = semEqFlowCond(v, semSsaRead(v2, d1), d2, true, eqIsTrue) and - result = boundFlowCond(v2, e, delta + d1 - d2, upper, testIsTrue) and - // guardEq needs to control guard - guardEq.directlyControls(result.getBasicBlock(), eqIsTrue) - ) -} - -private newtype TSemReason = - TSemNoReason() or - TSemCondReason(SemGuard guard) { possibleReason(guard) } - -/** - * A reason for an inferred bound. This can either be `CondReason` if the bound - * is due to a specific condition, or `NoReason` if the bound is inferred - * without going through a bounding condition. - */ -abstract class SemReason extends TSemReason { - /** Gets a textual representation of this reason. */ - abstract string toString(); -} - -/** - * A reason for an inferred bound that indicates that the bound is inferred - * without going through a bounding condition. - */ -class SemNoReason extends SemReason, TSemNoReason { - override string toString() { result = "NoReason" } -} - -/** A reason for an inferred bound pointing to a condition. */ -class SemCondReason extends SemReason, TSemCondReason { - /** Gets the condition that is the reason for the bound. */ - SemGuard getCond() { this = TSemCondReason(result) } - - override string toString() { result = getCond().toString() } -} - -/** - * Holds if `e + delta` is a valid bound for `v` at `pos`. - * - `upper = true` : `v <= e + delta` - * - `upper = false` : `v >= e + delta` - */ -private predicate boundFlowStepSsa( - SemSsaVariable v, SemSsaReadPosition pos, SemExpr e, int delta, boolean upper, SemReason reason -) { - semSsaUpdateStep(v, e, delta) and - pos.hasReadOfVar(v) and - (upper = true or upper = false) and - reason = TSemNoReason() - or - exists(SemGuard guard, boolean testIsTrue | - pos.hasReadOfVar(v) and - guard = boundFlowCond(v, e, delta, upper, testIsTrue) and - semGuardDirectlyControlsSsaRead(guard, pos, testIsTrue) and - reason = TSemCondReason(guard) - ) -} - -/** Holds if `v != e + delta` at `pos` and `v` is of integral type. */ -private predicate unequalFlowStepIntegralSsa( - SemSsaVariable v, SemSsaReadPosition pos, SemExpr e, int delta, SemReason reason -) { - getTrackedTypeForSsaVariable(v) instanceof SemIntegerType and - exists(SemGuard guard, boolean testIsTrue | - pos.hasReadOfVar(v) and - guard = semEqFlowCond(v, e, delta, false, testIsTrue) and - semGuardDirectlyControlsSsaRead(guard, pos, testIsTrue) and - reason = TSemCondReason(guard) - ) -} - -/** - * An expression that does conversion, boxing, or unboxing - */ -private class ConvertOrBoxExpr extends SemUnaryExpr { - ConvertOrBoxExpr() { - this instanceof SemConvertExpr - or - this instanceof SemBoxExpr - or - this instanceof SemUnboxExpr - } -} - -/** - * A cast that can be ignored for the purpose of range analysis. - */ -private class SafeCastExpr extends ConvertOrBoxExpr { - SafeCastExpr() { - conversionCannotOverflow(getTrackedType(pragma[only_bind_into](getOperand())), - getTrackedType(this)) - } -} - -/** - * Holds if `typ` is a small integral type with the given lower and upper bounds. - */ -private predicate typeBound(SemIntegerType typ, int lowerbound, int upperbound) { - exists(int bitSize | bitSize = typ.getByteSize() * 8 | - bitSize < 32 and - ( - if typ.isSigned() - then ( - upperbound = 1.bitShiftLeft(bitSize - 1) - 1 and - lowerbound = -upperbound - 1 - ) else ( - lowerbound = 0 and - upperbound = 1.bitShiftLeft(bitSize) - 1 - ) - ) - ) -} - -/** - * A cast to a small integral type that may overflow or underflow. - */ -private class NarrowingCastExpr extends ConvertOrBoxExpr { - NarrowingCastExpr() { - not this instanceof SafeCastExpr and - typeBound(getTrackedType(this), _, _) - } - - /** Gets the lower bound of the resulting type. */ - int getLowerBound() { typeBound(getTrackedType(this), result, _) } - - /** Gets the upper bound of the resulting type. */ - int getUpperBound() { typeBound(getTrackedType(this), _, result) } -} - -/** Holds if `e >= 1` as determined by sign analysis. */ -private predicate strictlyPositiveIntegralExpr(SemExpr e) { - semStrictlyPositive(e) and getTrackedType(e) instanceof SemIntegerType -} - -/** Holds if `e <= -1` as determined by sign analysis. */ -private predicate strictlyNegativeIntegralExpr(SemExpr e) { - semStrictlyNegative(e) and getTrackedType(e) instanceof SemIntegerType -} - -/** - * Holds if `e1 + delta` is a valid bound for `e2`. - * - `upper = true` : `e2 <= e1 + delta` - * - `upper = false` : `e2 >= e1 + delta` - */ -private predicate boundFlowStep(SemExpr e2, SemExpr e1, int delta, boolean upper) { - semValueFlowStep(e2, e1, delta) and - (upper = true or upper = false) - or - e2.(SafeCastExpr).getOperand() = e1 and - delta = 0 and - (upper = true or upper = false) - or - exists(SemExpr x | e2.(SemAddExpr).hasOperands(e1, x) | - // `x instanceof ConstantIntegerExpr` is covered by valueFlowStep - not x instanceof SemConstantIntegerExpr and - not e1 instanceof SemConstantIntegerExpr and - if strictlyPositiveIntegralExpr(x) - then upper = false and delta = 1 - else - if semPositive(x) - then upper = false and delta = 0 - else - if strictlyNegativeIntegralExpr(x) - then upper = true and delta = -1 - else - if semNegative(x) - then upper = true and delta = 0 - else none() - ) - or - exists(SemExpr x, SemSubExpr sub | - e2 = sub and - sub.getLeftOperand() = e1 and - sub.getRightOperand() = x - | - // `x instanceof ConstantIntegerExpr` is covered by valueFlowStep - not x instanceof SemConstantIntegerExpr and - if strictlyPositiveIntegralExpr(x) - then upper = true and delta = -1 - else - if semPositive(x) - then upper = true and delta = 0 - else - if strictlyNegativeIntegralExpr(x) - then upper = false and delta = 1 - else - if semNegative(x) - then upper = false and delta = 0 - else none() - ) - or - e2.(SemRemExpr).getRightOperand() = e1 and - semPositive(e1) and - delta = -1 and - upper = true - or - e2.(SemRemExpr).getLeftOperand() = e1 and semPositive(e1) and delta = 0 and upper = true - or - e2.(SemBitAndExpr).getAnOperand() = e1 and - semPositive(e1) and - delta = 0 and - upper = true - or - e2.(SemBitOrExpr).getAnOperand() = e1 and - semPositive(e2) and - delta = 0 and - upper = false - or - Specific::hasBound(e2, e1, delta, upper) -} - -/** Holds if `e2 = e1 * factor` and `factor > 0`. */ -private predicate boundFlowStepMul(SemExpr e2, SemExpr e1, int factor) { - exists(SemConstantIntegerExpr c, int k | k = c.getIntValue() and k > 0 | - e2.(SemMulExpr).hasOperands(e1, c) and factor = k - or - exists(SemShiftLeftExpr e | - e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = 2.pow(k) - ) - ) -} - -/** - * Holds if `e2 = e1 / factor` and `factor > 0`. - * - * This conflates division, right shift, and unsigned right shift and is - * therefore only valid for non-negative numbers. - */ -private predicate boundFlowStepDiv(SemExpr e2, SemExpr e1, int factor) { - exists(SemConstantIntegerExpr c, int k | k = c.getIntValue() and k > 0 | - exists(SemDivExpr e | - e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = k - ) - or - exists(SemShiftRightExpr e | - e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = 2.pow(k) - ) - or - exists(SemShiftRightUnsignedExpr e | - e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = 2.pow(k) - ) - ) -} - -/** - * Holds if `b + delta` is a valid bound for `v` at `pos`. - * - `upper = true` : `v <= b + delta` - * - `upper = false` : `v >= b + delta` - */ -private predicate boundedSsa( - SemSsaVariable v, SemSsaReadPosition pos, SemBound b, int delta, boolean upper, - boolean fromBackEdge, int origdelta, SemReason reason -) { - exists(SemExpr mid, int d1, int d2, SemReason r1, SemReason r2 | - boundFlowStepSsa(v, pos, mid, d1, upper, r1) and - bounded(mid, b, d2, upper, fromBackEdge, origdelta, r2) and - // upper = true: v <= mid + d1 <= b + d1 + d2 = b + delta - // upper = false: v >= mid + d1 >= b + d1 + d2 = b + delta - delta = d1 + d2 and - (if r1 instanceof SemNoReason then reason = r2 else reason = r1) - ) - or - exists(int d, SemReason r1, SemReason r2 | - boundedSsa(v, pos, b, d, upper, fromBackEdge, origdelta, r2) or - boundedPhi(v, b, d, upper, fromBackEdge, origdelta, r2) - | - unequalIntegralSsa(v, pos, b, d, r1) and - ( - upper = true and delta = d - 1 - or - upper = false and delta = d + 1 - ) and - ( - reason = r1 - or - reason = r2 and not r2 instanceof SemNoReason - ) - ) -} - -/** - * Holds if `v != b + delta` at `pos` and `v` is of integral type. - */ -private predicate unequalIntegralSsa( - SemSsaVariable v, SemSsaReadPosition pos, SemBound b, int delta, SemReason reason -) { - exists(SemExpr e, int d1, int d2 | - unequalFlowStepIntegralSsa(v, pos, e, d1, reason) and - boundedUpper(e, b, d1) and - boundedLower(e, b, d2) and - delta = d2 + d1 - ) -} - -/** - * Holds if `b + delta` is an upper bound for `e`. - * - * This predicate only exists to prevent a bad standard order in `unequalIntegralSsa`. - */ -pragma[nomagic] -private predicate boundedUpper(SemExpr e, SemBound b, int delta) { - bounded(e, b, delta, true, _, _, _) -} - -/** - * Holds if `b + delta` is a lower bound for `e`. - * - * This predicate only exists to prevent a bad standard order in `unequalIntegralSsa`. - */ -pragma[nomagic] -private predicate boundedLower(SemExpr e, SemBound b, int delta) { - bounded(e, b, delta, false, _, _, _) -} - -/** Weakens a delta to lie in the range `[-1..1]`. */ -bindingset[delta, upper] -private int weakenDelta(boolean upper, int delta) { - delta in [-1 .. 1] and result = delta - or - upper = true and result = -1 and delta < -1 - or - upper = false and result = 1 and delta > 1 -} - -/** - * Holds if `b + delta` is a valid bound for `inp` when used as an input to - * `phi` along `edge`. - * - `upper = true` : `inp <= b + delta` - * - `upper = false` : `inp >= b + delta` - */ -private predicate boundedPhiInp( - SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, SemBound b, int delta, - boolean upper, boolean fromBackEdge, int origdelta, SemReason reason -) { - edge.phiInput(phi, inp) and - exists(int d, boolean fromBackEdge0 | - boundedSsa(inp, edge, b, d, upper, fromBackEdge0, origdelta, reason) - or - boundedPhi(inp, b, d, upper, fromBackEdge0, origdelta, reason) - or - b.(SemSsaBound).getAVariable() = inp and - d = 0 and - (upper = true or upper = false) and - fromBackEdge0 = false and - origdelta = 0 and - reason = TSemNoReason() - | - if semBackEdge(phi, inp, edge) - then - fromBackEdge = true and - ( - fromBackEdge0 = true and delta = weakenDelta(upper, d - origdelta) + origdelta - or - fromBackEdge0 = false and delta = d - ) - else ( - delta = d and fromBackEdge = fromBackEdge0 - ) - ) -} - -/** - * Holds if `b + delta` is a valid bound for `inp` when used as an input to - * `phi` along `edge`. - * - `upper = true` : `inp <= b + delta` - * - `upper = false` : `inp >= b + delta` - * - * Equivalent to `boundedPhiInp(phi, inp, edge, b, delta, upper, _, _, _)`. - */ -pragma[noinline] -private predicate boundedPhiInp1( - SemSsaPhiNode phi, SemBound b, boolean upper, SemSsaVariable inp, - SemSsaReadPositionPhiInputEdge edge, int delta -) { - boundedPhiInp(phi, inp, edge, b, delta, upper, _, _, _) -} - -/** - * Holds if `phi` is a valid bound for `inp` when used as an input to `phi` - * along `edge`. - * - `upper = true` : `inp <= phi` - * - `upper = false` : `inp >= phi` - */ -private predicate selfBoundedPhiInp( - SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, boolean upper -) { - exists(int d, SemSsaBound phibound | - phibound.getAVariable() = phi and - boundedPhiInp(phi, inp, edge, phibound, d, upper, _, _, _) and - ( - upper = true and d <= 0 - or - upper = false and d >= 0 - ) - ) -} - -/** - * Holds if `b + delta` is a valid bound for some input, `inp`, to `phi`, and - * thus a candidate bound for `phi`. - * - `upper = true` : `inp <= b + delta` - * - `upper = false` : `inp >= b + delta` - */ -pragma[noinline] -private predicate boundedPhiCand( - SemSsaPhiNode phi, boolean upper, SemBound b, int delta, boolean fromBackEdge, int origdelta, - SemReason reason -) { - boundedPhiInp(phi, _, _, b, delta, upper, fromBackEdge, origdelta, reason) -} - -/** - * Holds if the candidate bound `b + delta` for `phi` is valid for the phi input - * `inp` along `edge`. - */ -private predicate boundedPhiCandValidForEdge( - SemSsaPhiNode phi, SemBound b, int delta, boolean upper, boolean fromBackEdge, int origdelta, - SemReason reason, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge -) { - boundedPhiCand(phi, upper, b, delta, fromBackEdge, origdelta, reason) and - ( - exists(int d | boundedPhiInp1(phi, b, upper, inp, edge, d) | upper = true and d <= delta) - or - exists(int d | boundedPhiInp1(phi, b, upper, inp, edge, d) | upper = false and d >= delta) - or - selfBoundedPhiInp(phi, inp, edge, upper) - ) -} - -/** - * Holds if `b + delta` is a valid bound for `phi`. - * - `upper = true` : `phi <= b + delta` - * - `upper = false` : `phi >= b + delta` - */ -private predicate boundedPhi( - SemSsaPhiNode phi, SemBound b, int delta, boolean upper, boolean fromBackEdge, int origdelta, - SemReason reason -) { - forex(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge | edge.phiInput(phi, inp) | - boundedPhiCandValidForEdge(phi, b, delta, upper, fromBackEdge, origdelta, reason, inp, edge) - ) -} - -/** - * Holds if `e` has an upper (for `upper = true`) or lower - * (for `upper = false`) bound of `b`. - */ -private predicate baseBound(SemExpr e, int b, boolean upper) { - Specific::hasConstantBound(e, b, upper) - or - upper = false and - b = 0 and - semPositive(e.(SemBitAndExpr).getAnOperand()) and - // REVIEW: We let the language opt out here to preserve original results. - not Specific::ignoreZeroLowerBound(e) -} - -/** - * Holds if the value being cast has an upper (for `upper = true`) or lower - * (for `upper = false`) bound within the bounds of the resulting type. - * For `upper = true` this means that the cast will not overflow and for - * `upper = false` this means that the cast will not underflow. - */ -private predicate safeNarrowingCast(NarrowingCastExpr cast, boolean upper) { - exists(int bound | bounded(cast.getOperand(), any(SemZeroBound zb), bound, upper, _, _, _) | - upper = true and bound <= cast.getUpperBound() - or - upper = false and bound >= cast.getLowerBound() - ) -} - -pragma[noinline] -private predicate boundedCastExpr( - NarrowingCastExpr cast, SemBound b, int delta, boolean upper, boolean fromBackEdge, int origdelta, - SemReason reason -) { - bounded(cast.getOperand(), b, delta, upper, fromBackEdge, origdelta, reason) -} - -/** - * Holds if `b + delta` is a valid bound for `e`. - * - `upper = true` : `e <= b + delta` - * - `upper = false` : `e >= b + delta` - */ -private predicate bounded( - SemExpr e, SemBound b, int delta, boolean upper, boolean fromBackEdge, int origdelta, - SemReason reason -) { - not Specific::ignoreExprBound(e) and - ( - e = b.getExpr(delta) and - (upper = true or upper = false) and - fromBackEdge = false and - origdelta = delta and - reason = TSemNoReason() - or - baseBound(e, delta, upper) and - b instanceof SemZeroBound and - fromBackEdge = false and - origdelta = delta and - reason = TSemNoReason() - or - exists(SemSsaVariable v, SemSsaReadPositionBlock bb | - boundedSsa(v, bb, b, delta, upper, fromBackEdge, origdelta, reason) and - e = v.getAUse() and - bb.getBlock() = e.getBasicBlock() - ) - or - exists(SemExpr mid, int d1, int d2 | - boundFlowStep(e, mid, d1, upper) and - // Constants have easy, base-case bounds, so let's not infer any recursive bounds. - not e instanceof SemConstantIntegerExpr and - bounded(mid, b, d2, upper, fromBackEdge, origdelta, reason) and - // upper = true: e <= mid + d1 <= b + d1 + d2 = b + delta - // upper = false: e >= mid + d1 >= b + d1 + d2 = b + delta - delta = d1 + d2 - ) - or - exists(SemSsaPhiNode phi | - boundedPhi(phi, b, delta, upper, fromBackEdge, origdelta, reason) and - e = phi.getAUse() - ) - or - exists(SemExpr mid, int factor, int d | - boundFlowStepMul(e, mid, factor) and - not e instanceof SemConstantIntegerExpr and - bounded(mid, b, d, upper, fromBackEdge, origdelta, reason) and - b instanceof SemZeroBound and - delta = d * factor - ) - or - exists(SemExpr mid, int factor, int d | - boundFlowStepDiv(e, mid, factor) and - not e instanceof SemConstantIntegerExpr and - bounded(mid, b, d, upper, fromBackEdge, origdelta, reason) and - b instanceof SemZeroBound and - d >= 0 and - delta = d / factor - ) - or - exists(NarrowingCastExpr cast | - cast = e and - safeNarrowingCast(cast, upper.booleanNot()) and - boundedCastExpr(cast, b, delta, upper, fromBackEdge, origdelta, reason) - ) - or - exists( - SemConditionalExpr cond, int d1, int d2, boolean fbe1, boolean fbe2, int od1, int od2, - SemReason r1, SemReason r2 - | - cond = e and - boundedConditionalExpr(cond, b, upper, true, d1, fbe1, od1, r1) and - boundedConditionalExpr(cond, b, upper, false, d2, fbe2, od2, r2) and - ( - delta = d1 and fromBackEdge = fbe1 and origdelta = od1 and reason = r1 - or - delta = d2 and fromBackEdge = fbe2 and origdelta = od2 and reason = r2 - ) - | - upper = true and delta = d1.maximum(d2) - or - upper = false and delta = d1.minimum(d2) - ) - ) -} - -private predicate boundedConditionalExpr( - SemConditionalExpr cond, SemBound b, boolean upper, boolean branch, int delta, - boolean fromBackEdge, int origdelta, SemReason reason -) { - bounded(cond.getBranchExpr(branch), b, delta, upper, fromBackEdge, origdelta, reason) -} +import CppRangeAnalysis diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysisSpecific.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysisSpecific.qll index 5918b56e50e..34d5bca116b 100644 --- a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysisSpecific.qll +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysisSpecific.qll @@ -3,86 +3,90 @@ */ private import experimental.semmle.code.cpp.semantic.Semantic +private import RangeAnalysisStage +private import experimental.semmle.code.cpp.semantic.analysis.FloatDelta -/** - * Holds if the specified expression should be excluded from the result of `ssaRead()`. - * - * This predicate is to keep the results identical to the original Java implementation. It should be - * removed once we have the new implementation matching the old results exactly. - */ -predicate ignoreSsaReadCopy(SemExpr e) { none() } +module CppLangImpl implements LangSig { + /** + * Holds if the specified expression should be excluded from the result of `ssaRead()`. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreSsaReadCopy(SemExpr e) { none() } -/** - * Ignore the bound on this expression. - * - * This predicate is to keep the results identical to the original Java implementation. It should be - * removed once we have the new implementation matching the old results exactly. - */ -predicate ignoreExprBound(SemExpr e) { none() } + /** + * Ignore the bound on this expression. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreExprBound(SemExpr e) { none() } -/** - * Ignore any inferred zero lower bound on this expression. - * - * This predicate is to keep the results identical to the original Java implementation. It should be - * removed once we have the new implementation matching the old results exactly. - */ -predicate ignoreZeroLowerBound(SemExpr e) { none() } + /** + * Ignore any inferred zero lower bound on this expression. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreZeroLowerBound(SemExpr e) { none() } -/** - * Holds if the specified expression should be excluded from the result of `ssaRead()`. - * - * This predicate is to keep the results identical to the original Java implementation. It should be - * removed once we have the new implementation matching the old results exactly. - */ -predicate ignoreSsaReadArithmeticExpr(SemExpr e) { none() } + /** + * Holds if the specified expression should be excluded from the result of `ssaRead()`. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreSsaReadArithmeticExpr(SemExpr e) { none() } -/** - * Holds if the specified variable should be excluded from the result of `ssaRead()`. - * - * This predicate is to keep the results identical to the original Java implementation. It should be - * removed once we have the new implementation matching the old results exactly. - */ -predicate ignoreSsaReadAssignment(SemSsaVariable v) { none() } + /** + * Holds if the specified variable should be excluded from the result of `ssaRead()`. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreSsaReadAssignment(SemSsaVariable v) { none() } -/** - * Adds additional results to `ssaRead()` that are specific to Java. - * - * This predicate handles propagation of offsets for post-increment and post-decrement expressions - * in exactly the same way as the old Java implementation. Once the new implementation matches the - * old one, we should remove this predicate and propagate deltas for all similar patterns, whether - * or not they come from a post-increment/decrement expression. - */ -SemExpr specificSsaRead(SemSsaVariable v, int delta) { none() } + /** + * Adds additional results to `ssaRead()` that are specific to Java. + * + * This predicate handles propagation of offsets for post-increment and post-decrement expressions + * in exactly the same way as the old Java implementation. Once the new implementation matches the + * old one, we should remove this predicate and propagate deltas for all similar patterns, whether + * or not they come from a post-increment/decrement expression. + */ + SemExpr specificSsaRead(SemSsaVariable v, float delta) { none() } -/** - * Holds if `e >= bound` (if `upper = false`) or `e <= bound` (if `upper = true`). - */ -predicate hasConstantBound(SemExpr e, int bound, boolean upper) { none() } + /** + * Holds if `e >= bound` (if `upper = false`) or `e <= bound` (if `upper = true`). + */ + predicate hasConstantBound(SemExpr e, float bound, boolean upper) { none() } -/** - * Holds if `e >= bound + delta` (if `upper = false`) or `e <= bound + delta` (if `upper = true`). - */ -predicate hasBound(SemExpr e, SemExpr bound, int delta, boolean upper) { none() } + /** + * Holds if `e >= bound + delta` (if `upper = false`) or `e <= bound + delta` (if `upper = true`). + */ + predicate hasBound(SemExpr e, SemExpr bound, float delta, boolean upper) { none() } -/** - * Holds if the value of `dest` is known to be `src + delta`. - */ -predicate additionalValueFlowStep(SemExpr dest, SemExpr src, int delta) { none() } + /** + * Holds if the value of `dest` is known to be `src + delta`. + */ + predicate additionalValueFlowStep(SemExpr dest, SemExpr src, float delta) { none() } -/** - * Gets the type that range analysis should use to track the result of the specified expression, - * if a type other than the original type of the expression is to be used. - * - * This predicate is commonly used in languages that support immutable "boxed" types that are - * actually references but whose values can be tracked as the type contained in the box. - */ -SemType getAlternateType(SemExpr e) { none() } + /** + * Gets the type that range analysis should use to track the result of the specified expression, + * if a type other than the original type of the expression is to be used. + * + * This predicate is commonly used in languages that support immutable "boxed" types that are + * actually references but whose values can be tracked as the type contained in the box. + */ + SemType getAlternateType(SemExpr e) { none() } -/** - * Gets the type that range analysis should use to track the result of the specified source - * variable, if a type other than the original type of the expression is to be used. - * - * This predicate is commonly used in languages that support immutable "boxed" types that are - * actually references but whose values can be tracked as the type contained in the box. - */ -SemType getAlternateTypeForSsaVariable(SemSsaVariable var) { none() } + /** + * Gets the type that range analysis should use to track the result of the specified source + * variable, if a type other than the original type of the expression is to be used. + * + * This predicate is commonly used in languages that support immutable "boxed" types that are + * actually references but whose values can be tracked as the type contained in the box. + */ + SemType getAlternateTypeForSsaVariable(SemSsaVariable var) { none() } +} diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysisStage.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysisStage.qll new file mode 100644 index 00000000000..fc9e4cfbaef --- /dev/null +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeAnalysisStage.qll @@ -0,0 +1,1032 @@ +/** + * Provides classes and predicates for range analysis. + * + * An inferred bound can either be a specific integer, the abstract value of an + * SSA variable, or the abstract value of an interesting expression. The latter + * category includes array lengths that are not SSA variables. + * + * If an inferred bound relies directly on a condition, then this condition is + * reported as the reason for the bound. + */ + +/* + * This library tackles range analysis as a flow problem. Consider e.g.: + * ``` + * len = arr.length; + * if (x < len) { ... y = x-1; ... y ... } + * ``` + * In this case we would like to infer `y <= arr.length - 2`, and this is + * accomplished by tracking the bound through a sequence of steps: + * ``` + * arr.length --> len = .. --> x < len --> x-1 --> y = .. --> y + * ``` + * + * In its simplest form the step relation `E1 --> E2` relates two expressions + * such that `E1 <= B` implies `E2 <= B` for any `B` (with a second separate + * step relation handling lower bounds). Examples of such steps include + * assignments `E2 = E1` and conditions `x <= E1` where `E2` is a use of `x` + * guarded by the condition. + * + * In order to handle subtractions and additions with constants, and strict + * comparisons, the step relation is augmented with an integer delta. With this + * generalization `E1 --(delta)--> E2` relates two expressions and an integer + * such that `E1 <= B` implies `E2 <= B + delta` for any `B`. This corresponds + * to the predicate `boundFlowStep`. + * + * The complete range analysis is then implemented as the transitive closure of + * the step relation summing the deltas along the way. If `E1` transitively + * steps to `E2`, `delta` is the sum of deltas along the path, and `B` is an + * interesting bound equal to the value of `E1` then `E2 <= B + delta`. This + * corresponds to the predicate `bounded`. + * + * Phi nodes need a little bit of extra handling. Consider `x0 = phi(x1, x2)`. + * There are essentially two cases: + * - If `x1 <= B + d1` and `x2 <= B + d2` then `x0 <= B + max(d1,d2)`. + * - If `x1 <= B + d1` and `x2 <= x0 + d2` with `d2 <= 0` then `x0 <= B + d1`. + * The first case is for whenever a bound can be proven without taking looping + * into account. The second case is relevant when `x2` comes from a back-edge + * where we can prove that the variable has been non-increasing through the + * loop-iteration as this means that any upper bound that holds prior to the + * loop also holds for the variable during the loop. + * This generalizes to a phi node with `n` inputs, so if + * `x0 = phi(x1, ..., xn)` and `xi <= B + delta` for one of the inputs, then we + * also have `x0 <= B + delta` if we can prove either: + * - `xj <= B + d` with `d <= delta` or + * - `xj <= x0 + d` with `d <= 0` + * for each input `xj`. + * + * As all inferred bounds can be related directly to a path in the source code + * the only source of non-termination is if successive redundant (and thereby + * increasingly worse) bounds are calculated along a loop in the source code. + * We prevent this by weakening the bound to a small finite set of bounds when + * a path follows a second back-edge (we postpone weakening till the second + * back-edge as a precise bound might require traversing a loop once). + */ + +private import RangeUtils as Utils +private import SignAnalysisCommon +private import experimental.semmle.code.cpp.semantic.analysis.ModulusAnalysis +import experimental.semmle.code.cpp.semantic.SemanticExpr +import experimental.semmle.code.cpp.semantic.SemanticSSA +import experimental.semmle.code.cpp.semantic.SemanticGuard +import experimental.semmle.code.cpp.semantic.SemanticCFG +import experimental.semmle.code.cpp.semantic.SemanticType +import experimental.semmle.code.cpp.semantic.SemanticOpcode +private import ConstantAnalysis + +/** + * Holds if `typ` is a small integral type with the given lower and upper bounds. + */ +private predicate typeBound(SemIntegerType typ, int lowerbound, int upperbound) { + exists(int bitSize | bitSize = typ.getByteSize() * 8 | + bitSize < 32 and + ( + if typ.isSigned() + then ( + upperbound = 1.bitShiftLeft(bitSize - 1) - 1 and + lowerbound = -upperbound - 1 + ) else ( + lowerbound = 0 and + upperbound = 1.bitShiftLeft(bitSize) - 1 + ) + ) + ) +} + +signature module DeltaSig { + bindingset[this] + class Delta; + + bindingset[d] + bindingset[result] + float toFloat(Delta d); + + bindingset[d] + bindingset[result] + int toInt(Delta d); + + bindingset[n] + bindingset[result] + Delta fromInt(int n); + + bindingset[f] + Delta fromFloat(float f); +} + +signature module LangSig { + /** + * Holds if the specified expression should be excluded from the result of `ssaRead()`. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreSsaReadCopy(SemExpr e); + + /** + * Holds if `e >= bound` (if `upper = false`) or `e <= bound` (if `upper = true`). + */ + predicate hasConstantBound(SemExpr e, D::Delta bound, boolean upper); + + /** + * Holds if `e >= bound + delta` (if `upper = false`) or `e <= bound + delta` (if `upper = true`). + */ + predicate hasBound(SemExpr e, SemExpr bound, D::Delta delta, boolean upper); + + /** + * Ignore the bound on this expression. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreExprBound(SemExpr e); + + /** + * Ignore any inferred zero lower bound on this expression. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreZeroLowerBound(SemExpr e); + + /** + * Holds if the specified expression should be excluded from the result of `ssaRead()`. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreSsaReadArithmeticExpr(SemExpr e); + + /** + * Holds if the specified variable should be excluded from the result of `ssaRead()`. + * + * This predicate is to keep the results identical to the original Java implementation. It should be + * removed once we have the new implementation matching the old results exactly. + */ + predicate ignoreSsaReadAssignment(SemSsaVariable v); + + /** + * Adds additional results to `ssaRead()` that are specific to Java. + * + * This predicate handles propagation of offsets for post-increment and post-decrement expressions + * in exactly the same way as the old Java implementation. Once the new implementation matches the + * old one, we should remove this predicate and propagate deltas for all similar patterns, whether + * or not they come from a post-increment/decrement expression. + */ + SemExpr specificSsaRead(SemSsaVariable v, D::Delta delta); + + /** + * Holds if the value of `dest` is known to be `src + delta`. + */ + predicate additionalValueFlowStep(SemExpr dest, SemExpr src, D::Delta delta); + + /** + * Gets the type that range analysis should use to track the result of the specified expression, + * if a type other than the original type of the expression is to be used. + * + * This predicate is commonly used in languages that support immutable "boxed" types that are + * actually references but whose values can be tracked as the type contained in the box. + */ + SemType getAlternateType(SemExpr e); + + /** + * Gets the type that range analysis should use to track the result of the specified source + * variable, if a type other than the original type of the expression is to be used. + * + * This predicate is commonly used in languages that support immutable "boxed" types that are + * actually references but whose values can be tracked as the type contained in the box. + */ + SemType getAlternateTypeForSsaVariable(SemSsaVariable var); +} + +signature module UtilSig { + SemExpr semSsaRead(SemSsaVariable v, DeltaParam::Delta delta); + + SemGuard semEqFlowCond( + SemSsaVariable v, SemExpr e, DeltaParam::Delta delta, boolean isEq, boolean testIsTrue + ); + + predicate semSsaUpdateStep(SemSsaExplicitUpdate v, SemExpr e, DeltaParam::Delta delta); + + predicate semValueFlowStep(SemExpr e2, SemExpr e1, DeltaParam::Delta delta); + + /** + * Gets the type used to track the specified source variable's range information. + * + * Usually, this just `e.getType()`, but the language can override this to track immutable boxed + * primitive types as the underlying primitive type. + */ + SemType getTrackedTypeForSsaVariable(SemSsaVariable var); + + /** + * Gets the type used to track the specified expression's range information. + * + * Usually, this just `e.getSemType()`, but the language can override this to track immutable boxed + * primitive types as the underlying primitive type. + */ + SemType getTrackedType(SemExpr e); +} + +signature module BoundSig { + class SemBound { + SemExpr getExpr(D::Delta delta); + } + + class SemZeroBound extends SemBound; + + class SemSsaBound extends SemBound { + SemSsaVariable getAVariable(); + } +} + +module RangeStage Bounds, LangSig LangParam, UtilSig UtilParam> { + private import Bounds + private import LangParam + private import UtilParam + private import D + + /** + * An expression that does conversion, boxing, or unboxing + */ + private class ConvertOrBoxExpr instanceof SemUnaryExpr { + ConvertOrBoxExpr() { + this instanceof SemConvertExpr + or + this instanceof SemBoxExpr + or + this instanceof SemUnboxExpr + } + + string toString() { result = super.toString() } + + SemExpr getOperand() { result = super.getOperand() } + } + + /** + * A cast that can be ignored for the purpose of range analysis. + */ + private class SafeCastExpr extends ConvertOrBoxExpr { + SafeCastExpr() { + conversionCannotOverflow(getTrackedType(pragma[only_bind_into](getOperand())), + pragma[only_bind_out](getTrackedType(this))) + } + } + + /** + * A cast to a small integral type that may overflow or underflow. + */ + private class NarrowingCastExpr extends ConvertOrBoxExpr { + NarrowingCastExpr() { + not this instanceof SafeCastExpr and + typeBound(getTrackedType(this), _, _) + } + + /** Gets the lower bound of the resulting type. */ + int getLowerBound() { typeBound(getTrackedType(this), result, _) } + + /** Gets the upper bound of the resulting type. */ + int getUpperBound() { typeBound(getTrackedType(this), _, result) } + } + + private module SignAnalysisInstantiated = SignAnalysis; // TODO: will this cause reevaluation if it's instantiated with the same DeltaSig and UtilParam multiple times? + + private import SignAnalysisInstantiated + + private module ModulusAnalysisInstantiated = ModulusAnalysis; // TODO: will this cause reevaluation if it's instantiated with the same DeltaSig and UtilParam multiple times? + + private import ModulusAnalysisInstantiated + + cached + private module RangeAnalysisCache { + cached + module RangeAnalysisPublic { + /** + * Holds if `b + delta` is a valid bound for `e`. + * - `upper = true` : `e <= b + delta` + * - `upper = false` : `e >= b + delta` + * + * The reason for the bound is given by `reason` and may be either a condition + * or `NoReason` if the bound was proven directly without the use of a bounding + * condition. + */ + cached + predicate semBounded(SemExpr e, SemBound b, D::Delta delta, boolean upper, SemReason reason) { + bounded(e, b, delta, upper, _, _, reason) and + bestBound(e, b, delta, upper) + } + } + + /** + * Holds if `guard = boundFlowCond(_, _, _, _, _) or guard = eqFlowCond(_, _, _, _, _)`. + */ + cached + predicate possibleReason(SemGuard guard) { + guard = boundFlowCond(_, _, _, _, _) or guard = semEqFlowCond(_, _, _, _, _) + } + } + + private import RangeAnalysisCache + import RangeAnalysisPublic + + /** + * Holds if `b + delta` is a valid bound for `e` and this is the best such delta. + * - `upper = true` : `e <= b + delta` + * - `upper = false` : `e >= b + delta` + */ + private predicate bestBound(SemExpr e, SemBound b, D::Delta delta, boolean upper) { + delta = min(D::Delta d | bounded(e, b, d, upper, _, _, _) | d order by D::toFloat(d)) and + upper = true + or + delta = max(D::Delta d | bounded(e, b, d, upper, _, _, _) | d order by D::toFloat(d)) and + upper = false + } + + /** + * Holds if `comp` corresponds to: + * - `upper = true` : `v <= e + delta` or `v < e + delta` + * - `upper = false` : `v >= e + delta` or `v > e + delta` + */ + private predicate boundCondition( + SemRelationalExpr comp, SemSsaVariable v, SemExpr e, D::Delta delta, boolean upper + ) { + comp.getLesserOperand() = semSsaRead(v, delta) and + e = comp.getGreaterOperand() and + upper = true + or + comp.getGreaterOperand() = semSsaRead(v, delta) and + e = comp.getLesserOperand() and + upper = false + or + exists(SemSubExpr sub, SemConstantIntegerExpr c, D::Delta d | + // (v - d) - e < c + comp.getLesserOperand() = sub and + comp.getGreaterOperand() = c and + sub.getLeftOperand() = semSsaRead(v, d) and + sub.getRightOperand() = e and + upper = true and + delta = D::fromFloat(D::toFloat(d) + c.getIntValue()) + or + // (v - d) - e > c + comp.getGreaterOperand() = sub and + comp.getLesserOperand() = c and + sub.getLeftOperand() = semSsaRead(v, d) and + sub.getRightOperand() = e and + upper = false and + delta = D::fromFloat(D::toFloat(d) + c.getIntValue()) + or + // e - (v - d) < c + comp.getLesserOperand() = sub and + comp.getGreaterOperand() = c and + sub.getLeftOperand() = e and + sub.getRightOperand() = semSsaRead(v, d) and + upper = false and + delta = D::fromFloat(D::toFloat(d) - c.getIntValue()) + or + // e - (v - d) > c + comp.getGreaterOperand() = sub and + comp.getLesserOperand() = c and + sub.getLeftOperand() = e and + sub.getRightOperand() = semSsaRead(v, d) and + upper = true and + delta = D::fromFloat(D::toFloat(d) - c.getIntValue()) + ) + } + + /** + * Holds if `comp` is a comparison between `x` and `y` for which `y - x` has a + * fixed value modulo some `mod > 1`, such that the comparison can be + * strengthened by `strengthen` when evaluating to `testIsTrue`. + */ + private predicate modulusComparison(SemRelationalExpr comp, boolean testIsTrue, int strengthen) { + exists( + SemBound b, int v1, int v2, int mod1, int mod2, int mod, boolean resultIsStrict, int d, int k + | + // If `x <= y` and `x =(mod) b + v1` and `y =(mod) b + v2` then + // `0 <= y - x =(mod) v2 - v1`. By choosing `k =(mod) v2 - v1` with + // `0 <= k < mod` we get `k <= y - x`. If the resulting comparison is + // strict then the strengthening amount is instead `k - 1` modulo `mod`: + // `x < y` means `0 <= y - x - 1 =(mod) k - 1` so `k - 1 <= y - x - 1` and + // thus `k - 1 < y - x` with `0 <= k - 1 < mod`. + semExprModulus(comp.getLesserOperand(), b, v1, mod1) and + semExprModulus(comp.getGreaterOperand(), b, v2, mod2) and + mod = mod1.gcd(mod2) and + mod != 1 and + (testIsTrue = true or testIsTrue = false) and + ( + if comp.isStrict() + then resultIsStrict = testIsTrue + else resultIsStrict = testIsTrue.booleanNot() + ) and + ( + resultIsStrict = true and d = 1 + or + resultIsStrict = false and d = 0 + ) and + ( + testIsTrue = true and k = v2 - v1 + or + testIsTrue = false and k = v1 - v2 + ) and + strengthen = (((k - d) % mod) + mod) % mod + ) + } + + /** + * Gets a condition that tests whether `v` is bounded by `e + delta`. + * + * If the condition evaluates to `testIsTrue`: + * - `upper = true` : `v <= e + delta` + * - `upper = false` : `v >= e + delta` + */ + private SemGuard boundFlowCond( + SemSsaVariable v, SemExpr e, D::Delta delta, boolean upper, boolean testIsTrue + ) { + exists( + SemRelationalExpr comp, D::Delta d1, float d2, float d3, int strengthen, boolean compIsUpper, + boolean resultIsStrict + | + comp = result.asExpr() and + boundCondition(comp, v, e, d1, compIsUpper) and + (testIsTrue = true or testIsTrue = false) and + upper = compIsUpper.booleanXor(testIsTrue.booleanNot()) and + ( + if comp.isStrict() + then resultIsStrict = testIsTrue + else resultIsStrict = testIsTrue.booleanNot() + ) and + ( + if + getTrackedTypeForSsaVariable(v) instanceof SemIntegerType or + getTrackedTypeForSsaVariable(v) instanceof SemAddressType + then + upper = true and strengthen = -1 + or + upper = false and strengthen = 1 + else strengthen = 0 + ) and + ( + exists(int k | modulusComparison(comp, testIsTrue, k) and d2 = strengthen * k) + or + not modulusComparison(comp, testIsTrue, _) and d2 = 0 + ) and + // A strict inequality `x < y` can be strengthened to `x <= y - 1`. + ( + resultIsStrict = true and d3 = strengthen + or + resultIsStrict = false and d3 = 0 + ) and + delta = D::fromFloat(D::toFloat(d1) + d2 + d3) + ) + or + exists(boolean testIsTrue0 | + semImplies_v2(result, testIsTrue, boundFlowCond(v, e, delta, upper, testIsTrue0), testIsTrue0) + ) + or + result = semEqFlowCond(v, e, delta, true, testIsTrue) and + (upper = true or upper = false) + or + // guard that tests whether `v2` is bounded by `e + delta + d1 - d2` and + // exists a guard `guardEq` such that `v = v2 - d1 + d2`. + exists( + SemSsaVariable v2, SemGuard guardEq, boolean eqIsTrue, D::Delta d1, D::Delta d2, + D::Delta oldDelta + | + guardEq = semEqFlowCond(v, semSsaRead(v2, d1), d2, true, eqIsTrue) and + result = boundFlowCond(v2, e, oldDelta, upper, testIsTrue) and + // guardEq needs to control guard + guardEq.directlyControls(result.getBasicBlock(), eqIsTrue) and + delta = D::fromFloat(D::toFloat(oldDelta) - D::toFloat(d1) + D::toFloat(d2)) + ) + } + + private newtype TSemReason = + TSemNoReason() or + TSemCondReason(SemGuard guard) { possibleReason(guard) } + + /** + * A reason for an inferred bound. This can either be `CondReason` if the bound + * is due to a specific condition, or `NoReason` if the bound is inferred + * without going through a bounding condition. + */ + abstract class SemReason extends TSemReason { + /** Gets a textual representation of this reason. */ + abstract string toString(); + } + + /** + * A reason for an inferred bound that indicates that the bound is inferred + * without going through a bounding condition. + */ + class SemNoReason extends SemReason, TSemNoReason { + override string toString() { result = "NoReason" } + } + + /** A reason for an inferred bound pointing to a condition. */ + class SemCondReason extends SemReason, TSemCondReason { + /** Gets the condition that is the reason for the bound. */ + SemGuard getCond() { this = TSemCondReason(result) } + + override string toString() { result = getCond().toString() } + } + + /** + * Holds if `e + delta` is a valid bound for `v` at `pos`. + * - `upper = true` : `v <= e + delta` + * - `upper = false` : `v >= e + delta` + */ + private predicate boundFlowStepSsa( + SemSsaVariable v, SemSsaReadPosition pos, SemExpr e, D::Delta delta, boolean upper, + SemReason reason + ) { + semSsaUpdateStep(v, e, delta) and + pos.hasReadOfVar(v) and + (upper = true or upper = false) and + reason = TSemNoReason() + or + exists(SemGuard guard, boolean testIsTrue | + pos.hasReadOfVar(v) and + guard = boundFlowCond(v, e, delta, upper, testIsTrue) and + semGuardDirectlyControlsSsaRead(guard, pos, testIsTrue) and + reason = TSemCondReason(guard) + ) + } + + /** Holds if `v != e + delta` at `pos` and `v` is of integral type. */ + private predicate unequalFlowStepIntegralSsa( + SemSsaVariable v, SemSsaReadPosition pos, SemExpr e, D::Delta delta, SemReason reason + ) { + getTrackedTypeForSsaVariable(v) instanceof SemIntegerType and + exists(SemGuard guard, boolean testIsTrue | + pos.hasReadOfVar(v) and + guard = semEqFlowCond(v, e, delta, false, testIsTrue) and + semGuardDirectlyControlsSsaRead(guard, pos, testIsTrue) and + reason = TSemCondReason(guard) + ) + } + + /** Holds if `e >= 1` as determined by sign analysis. */ + private predicate strictlyPositiveIntegralExpr(SemExpr e) { + semStrictlyPositive(e) and getTrackedType(e) instanceof SemIntegerType + } + + /** Holds if `e <= -1` as determined by sign analysis. */ + private predicate strictlyNegativeIntegralExpr(SemExpr e) { + semStrictlyNegative(e) and getTrackedType(e) instanceof SemIntegerType + } + + /** + * Holds if `e1 + delta` is a valid bound for `e2`. + * - `upper = true` : `e2 <= e1 + delta` + * - `upper = false` : `e2 >= e1 + delta` + */ + private predicate boundFlowStep(SemExpr e2, SemExpr e1, D::Delta delta, boolean upper) { + semValueFlowStep(e2, e1, delta) and + (upper = true or upper = false) + or + e2.(SafeCastExpr).getOperand() = e1 and + delta = D::fromInt(0) and + (upper = true or upper = false) + or + exists(SemExpr x | e2.(SemAddExpr).hasOperands(e1, x) | + // `x instanceof ConstantIntegerExpr` is covered by valueFlowStep + not x instanceof SemConstantIntegerExpr and + not e1 instanceof SemConstantIntegerExpr and + if strictlyPositiveIntegralExpr(x) + then upper = false and delta = D::fromInt(1) + else + if semPositive(x) + then upper = false and delta = D::fromInt(0) + else + if strictlyNegativeIntegralExpr(x) + then upper = true and delta = D::fromInt(-1) + else + if semNegative(x) + then upper = true and delta = D::fromInt(0) + else none() + ) + or + exists(SemExpr x, SemSubExpr sub | + e2 = sub and + sub.getLeftOperand() = e1 and + sub.getRightOperand() = x + | + // `x instanceof ConstantIntegerExpr` is covered by valueFlowStep + not x instanceof SemConstantIntegerExpr and + if strictlyPositiveIntegralExpr(x) + then upper = true and delta = D::fromInt(-1) + else + if semPositive(x) + then upper = true and delta = D::fromInt(0) + else + if strictlyNegativeIntegralExpr(x) + then upper = false and delta = D::fromInt(1) + else + if semNegative(x) + then upper = false and delta = D::fromInt(0) + else none() + ) + or + e2.(SemRemExpr).getRightOperand() = e1 and + semPositive(e1) and + delta = D::fromInt(-1) and + upper = true + or + e2.(SemRemExpr).getLeftOperand() = e1 and + semPositive(e1) and + delta = D::fromInt(0) and + upper = true + or + e2.(SemBitAndExpr).getAnOperand() = e1 and + semPositive(e1) and + delta = D::fromInt(0) and + upper = true + or + e2.(SemBitOrExpr).getAnOperand() = e1 and + semPositive(e2) and + delta = D::fromInt(0) and + upper = false + or + hasBound(e2, e1, delta, upper) + } + + /** Holds if `e2 = e1 * factor` and `factor > 0`. */ + private predicate boundFlowStepMul(SemExpr e2, SemExpr e1, D::Delta factor) { + exists(SemConstantIntegerExpr c, int k | k = c.getIntValue() and k > 0 | + e2.(SemMulExpr).hasOperands(e1, c) and factor = D::fromInt(k) + or + exists(SemShiftLeftExpr e | + e = e2 and + e.getLeftOperand() = e1 and + e.getRightOperand() = c and + factor = D::fromInt(2.pow(k)) + ) + ) + } + + /** + * Holds if `e2 = e1 / factor` and `factor > 0`. + * + * This conflates division, right shift, and unsigned right shift and is + * therefore only valid for non-negative numbers. + */ + private predicate boundFlowStepDiv(SemExpr e2, SemExpr e1, D::Delta factor) { + exists(SemConstantIntegerExpr c, D::Delta k | + k = D::fromInt(c.getIntValue()) and D::toFloat(k) > 0 + | + exists(SemDivExpr e | + e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = k + ) + or + exists(SemShiftRightExpr e | + e = e2 and + e.getLeftOperand() = e1 and + e.getRightOperand() = c and + factor = D::fromInt(2.pow(D::toInt(k))) + ) + or + exists(SemShiftRightUnsignedExpr e | + e = e2 and + e.getLeftOperand() = e1 and + e.getRightOperand() = c and + factor = D::fromInt(2.pow(D::toInt(k))) + ) + ) + } + + /** + * Holds if `b + delta` is a valid bound for `v` at `pos`. + * - `upper = true` : `v <= b + delta` + * - `upper = false` : `v >= b + delta` + */ + private predicate boundedSsa( + SemSsaVariable v, SemSsaReadPosition pos, SemBound b, D::Delta delta, boolean upper, + boolean fromBackEdge, D::Delta origdelta, SemReason reason + ) { + exists(SemExpr mid, D::Delta d1, D::Delta d2, SemReason r1, SemReason r2 | + boundFlowStepSsa(v, pos, mid, d1, upper, r1) and + bounded(mid, b, d2, upper, fromBackEdge, origdelta, r2) and + // upper = true: v <= mid + d1 <= b + d1 + d2 = b + delta + // upper = false: v >= mid + d1 >= b + d1 + d2 = b + delta + delta = D::fromFloat(D::toFloat(d1) + D::toFloat(d2)) and + (if r1 instanceof SemNoReason then reason = r2 else reason = r1) + ) + or + exists(D::Delta d, SemReason r1, SemReason r2 | + boundedSsa(v, pos, b, d, upper, fromBackEdge, origdelta, r2) or + boundedPhi(v, b, d, upper, fromBackEdge, origdelta, r2) + | + unequalIntegralSsa(v, pos, b, d, r1) and + ( + upper = true and delta = D::fromFloat(D::toFloat(d) - 1) + or + upper = false and delta = D::fromFloat(D::toFloat(d) + 1) + ) and + ( + reason = r1 + or + reason = r2 and not r2 instanceof SemNoReason + ) + ) + } + + /** + * Holds if `v != b + delta` at `pos` and `v` is of integral type. + */ + private predicate unequalIntegralSsa( + SemSsaVariable v, SemSsaReadPosition pos, SemBound b, D::Delta delta, SemReason reason + ) { + exists(SemExpr e, D::Delta d1, D::Delta d2 | + unequalFlowStepIntegralSsa(v, pos, e, d1, reason) and + boundedUpper(e, b, d1) and + boundedLower(e, b, d2) and + delta = D::fromFloat(D::toFloat(d1) + D::toFloat(d2)) + ) + } + + /** + * Holds if `b + delta` is an upper bound for `e`. + * + * This predicate only exists to prevent a bad standard order in `unequalIntegralSsa`. + */ + pragma[nomagic] + private predicate boundedUpper(SemExpr e, SemBound b, D::Delta delta) { + bounded(e, b, delta, true, _, _, _) + } + + /** + * Holds if `b + delta` is a lower bound for `e`. + * + * This predicate only exists to prevent a bad standard order in `unequalIntegralSsa`. + */ + pragma[nomagic] + private predicate boundedLower(SemExpr e, SemBound b, D::Delta delta) { + bounded(e, b, delta, false, _, _, _) + } + + /** Weakens a delta to lie in the range `[-1..1]`. */ + bindingset[delta, upper] + private D::Delta weakenDelta(boolean upper, D::Delta delta) { + delta = D::fromFloat([-1 .. 1]) and result = delta + or + upper = true and result = D::fromFloat(-1) and D::toFloat(delta) < -1 + or + upper = false and result = D::fromFloat(1) and D::toFloat(delta) > 1 + } + + /** + * Holds if `b + delta` is a valid bound for `inp` when used as an input to + * `phi` along `edge`. + * - `upper = true` : `inp <= b + delta` + * - `upper = false` : `inp >= b + delta` + */ + private predicate boundedPhiInp( + SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, SemBound b, + D::Delta delta, boolean upper, boolean fromBackEdge, D::Delta origdelta, SemReason reason + ) { + edge.phiInput(phi, inp) and + exists(D::Delta d, boolean fromBackEdge0 | + boundedSsa(inp, edge, b, d, upper, fromBackEdge0, origdelta, reason) + or + boundedPhi(inp, b, d, upper, fromBackEdge0, origdelta, reason) + or + b.(SemSsaBound).getAVariable() = inp and + d = D::fromFloat(0) and + (upper = true or upper = false) and + fromBackEdge0 = false and + origdelta = D::fromFloat(0) and + reason = TSemNoReason() + | + if semBackEdge(phi, inp, edge) + then + fromBackEdge = true and + ( + fromBackEdge0 = true and + delta = + D::fromFloat(D::toFloat(weakenDelta(upper, + D::fromFloat(D::toFloat(d) - D::toFloat(origdelta)))) + D::toFloat(origdelta)) + or + fromBackEdge0 = false and delta = d + ) + else ( + delta = d and fromBackEdge = fromBackEdge0 + ) + ) + } + + /** + * Holds if `b + delta` is a valid bound for `inp` when used as an input to + * `phi` along `edge`. + * - `upper = true` : `inp <= b + delta` + * - `upper = false` : `inp >= b + delta` + * + * Equivalent to `boundedPhiInp(phi, inp, edge, b, delta, upper, _, _, _)`. + */ + pragma[noinline] + private predicate boundedPhiInp1( + SemSsaPhiNode phi, SemBound b, boolean upper, SemSsaVariable inp, + SemSsaReadPositionPhiInputEdge edge, D::Delta delta + ) { + boundedPhiInp(phi, inp, edge, b, delta, upper, _, _, _) + } + + /** + * Holds if `phi` is a valid bound for `inp` when used as an input to `phi` + * along `edge`. + * - `upper = true` : `inp <= phi` + * - `upper = false` : `inp >= phi` + */ + private predicate selfBoundedPhiInp( + SemSsaPhiNode phi, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge, boolean upper + ) { + exists(D::Delta d, SemSsaBound phibound | + phibound.getAVariable() = phi and + boundedPhiInp(phi, inp, edge, phibound, d, upper, _, _, _) and + ( + upper = true and D::toFloat(d) <= 0 + or + upper = false and D::toFloat(d) >= 0 + ) + ) + } + + /** + * Holds if `b + delta` is a valid bound for some input, `inp`, to `phi`, and + * thus a candidate bound for `phi`. + * - `upper = true` : `inp <= b + delta` + * - `upper = false` : `inp >= b + delta` + */ + pragma[noinline] + private predicate boundedPhiCand( + SemSsaPhiNode phi, boolean upper, SemBound b, D::Delta delta, boolean fromBackEdge, + D::Delta origdelta, SemReason reason + ) { + boundedPhiInp(phi, _, _, b, delta, upper, fromBackEdge, origdelta, reason) + } + + /** + * Holds if the candidate bound `b + delta` for `phi` is valid for the phi input + * `inp` along `edge`. + */ + private predicate boundedPhiCandValidForEdge( + SemSsaPhiNode phi, SemBound b, D::Delta delta, boolean upper, boolean fromBackEdge, + D::Delta origdelta, SemReason reason, SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge + ) { + boundedPhiCand(phi, upper, b, delta, fromBackEdge, origdelta, reason) and + ( + exists(D::Delta d | boundedPhiInp1(phi, b, upper, inp, edge, d) | + upper = true and D::toFloat(d) <= D::toFloat(delta) + ) + or + exists(D::Delta d | boundedPhiInp1(phi, b, upper, inp, edge, d) | + upper = false and D::toFloat(d) >= D::toFloat(delta) + ) + or + selfBoundedPhiInp(phi, inp, edge, upper) + ) + } + + /** + * Holds if `b + delta` is a valid bound for `phi`. + * - `upper = true` : `phi <= b + delta` + * - `upper = false` : `phi >= b + delta` + */ + private predicate boundedPhi( + SemSsaPhiNode phi, SemBound b, D::Delta delta, boolean upper, boolean fromBackEdge, + D::Delta origdelta, SemReason reason + ) { + forex(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge | edge.phiInput(phi, inp) | + boundedPhiCandValidForEdge(phi, b, delta, upper, fromBackEdge, origdelta, reason, inp, edge) + ) + } + + /** + * Holds if `e` has an upper (for `upper = true`) or lower + * (for `upper = false`) bound of `b`. + */ + private predicate baseBound(SemExpr e, D::Delta b, boolean upper) { + hasConstantBound(e, b, upper) + or + upper = false and + b = D::fromInt(0) and + semPositive(e.(SemBitAndExpr).getAnOperand()) and + // REVIEW: We let the language opt out here to preserve original results. + not ignoreZeroLowerBound(e) + } + + /** + * Holds if the value being cast has an upper (for `upper = true`) or lower + * (for `upper = false`) bound within the bounds of the resulting type. + * For `upper = true` this means that the cast will not overflow and for + * `upper = false` this means that the cast will not underflow. + */ + private predicate safeNarrowingCast(NarrowingCastExpr cast, boolean upper) { + exists(D::Delta bound | + bounded(cast.getOperand(), any(SemZeroBound zb), bound, upper, _, _, _) + | + upper = true and D::toFloat(bound) <= cast.getUpperBound() + or + upper = false and D::toFloat(bound) >= cast.getLowerBound() + ) + } + + pragma[noinline] + private predicate boundedCastExpr( + NarrowingCastExpr cast, SemBound b, D::Delta delta, boolean upper, boolean fromBackEdge, + D::Delta origdelta, SemReason reason + ) { + bounded(cast.getOperand(), b, delta, upper, fromBackEdge, origdelta, reason) + } + + /** + * Holds if `b + delta` is a valid bound for `e`. + * - `upper = true` : `e <= b + delta` + * - `upper = false` : `e >= b + delta` + */ + private predicate bounded( + SemExpr e, SemBound b, D::Delta delta, boolean upper, boolean fromBackEdge, D::Delta origdelta, + SemReason reason + ) { + not ignoreExprBound(e) and + ( + e = b.getExpr(delta) and + (upper = true or upper = false) and + fromBackEdge = false and + origdelta = delta and + reason = TSemNoReason() + or + baseBound(e, delta, upper) and + b instanceof SemZeroBound and + fromBackEdge = false and + origdelta = delta and + reason = TSemNoReason() + or + exists(SemSsaVariable v, SemSsaReadPositionBlock bb | + boundedSsa(v, bb, b, delta, upper, fromBackEdge, origdelta, reason) and + e = v.getAUse() and + bb.getBlock() = e.getBasicBlock() + ) + or + exists(SemExpr mid, D::Delta d1, D::Delta d2 | + boundFlowStep(e, mid, d1, upper) and + // Constants have easy, base-case bounds, so let's not infer any recursive bounds. + not e instanceof SemConstantIntegerExpr and + bounded(mid, b, d2, upper, fromBackEdge, origdelta, reason) and + // upper = true: e <= mid + d1 <= b + d1 + d2 = b + delta + // upper = false: e >= mid + d1 >= b + d1 + d2 = b + delta + delta = D::fromFloat(D::toFloat(d1) + D::toFloat(d2)) + ) + or + exists(SemSsaPhiNode phi | + boundedPhi(phi, b, delta, upper, fromBackEdge, origdelta, reason) and + e = phi.getAUse() + ) + or + exists(SemExpr mid, D::Delta factor, D::Delta d | + boundFlowStepMul(e, mid, factor) and + not e instanceof SemConstantIntegerExpr and + bounded(mid, b, d, upper, fromBackEdge, origdelta, reason) and + b instanceof SemZeroBound and + delta = D::fromFloat(D::toFloat(d) * D::toFloat(factor)) + ) + or + exists(SemExpr mid, D::Delta factor, D::Delta d | + boundFlowStepDiv(e, mid, factor) and + not e instanceof SemConstantIntegerExpr and + bounded(mid, b, d, upper, fromBackEdge, origdelta, reason) and + b instanceof SemZeroBound and + D::toFloat(d) >= 0 and + delta = D::fromFloat(D::toFloat(d) / D::toFloat(factor)) + ) + or + exists(NarrowingCastExpr cast | + cast = e and + safeNarrowingCast(cast, upper.booleanNot()) and + boundedCastExpr(cast, b, delta, upper, fromBackEdge, origdelta, reason) + ) + or + exists( + SemConditionalExpr cond, D::Delta d1, D::Delta d2, boolean fbe1, boolean fbe2, D::Delta od1, + D::Delta od2, SemReason r1, SemReason r2 + | + cond = e and + boundedConditionalExpr(cond, b, upper, true, d1, fbe1, od1, r1) and + boundedConditionalExpr(cond, b, upper, false, d2, fbe2, od2, r2) and + ( + delta = d1 and fromBackEdge = fbe1 and origdelta = od1 and reason = r1 + or + delta = d2 and fromBackEdge = fbe2 and origdelta = od2 and reason = r2 + ) + | + upper = true and delta = D::fromFloat(D::toFloat(d1).maximum(D::toFloat(d2))) + or + upper = false and delta = D::fromFloat(D::toFloat(d1).minimum(D::toFloat(d2))) + ) + ) + } + + private predicate boundedConditionalExpr( + SemConditionalExpr cond, SemBound b, boolean upper, boolean branch, D::Delta delta, + boolean fromBackEdge, D::Delta origdelta, SemReason reason + ) { + bounded(cond.getBranchExpr(branch), b, delta, upper, fromBackEdge, origdelta, reason) + } +} diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeUtils.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeUtils.qll index 0bd7a407f1e..d9cc2cc9a71 100644 --- a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeUtils.qll +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeUtils.qll @@ -3,133 +3,138 @@ */ private import experimental.semmle.code.cpp.semantic.Semantic -private import RangeAnalysisSpecific as Specific +private import RangeAnalysisSpecific +private import RangeAnalysisStage as Range private import ConstantAnalysis -/** - * Gets an expression that equals `v - d`. - */ -SemExpr semSsaRead(SemSsaVariable v, int delta) { - // There are various language-specific extension points that can be removed once we no longer - // expect to match the original Java implementation's results exactly. - result = v.getAUse() and delta = 0 - or - exists(int d1, SemConstantIntegerExpr c | - result.(SemAddExpr).hasOperands(semSsaRead(v, d1), c) and - delta = d1 - c.getIntValue() and - not Specific::ignoreSsaReadArithmeticExpr(result) - ) - or - exists(SemSubExpr sub, int d1, SemConstantIntegerExpr c | - result = sub and - sub.getLeftOperand() = semSsaRead(v, d1) and - sub.getRightOperand() = c and - delta = d1 + c.getIntValue() and - not Specific::ignoreSsaReadArithmeticExpr(result) - ) - or - result = v.(SemSsaExplicitUpdate).getSourceExpr() and - delta = 0 and - not Specific::ignoreSsaReadAssignment(v) - or - result = Specific::specificSsaRead(v, delta) - or - result.(SemCopyValueExpr).getOperand() = semSsaRead(v, delta) and - not Specific::ignoreSsaReadCopy(result) - or - result.(SemStoreExpr).getOperand() = semSsaRead(v, delta) -} - -/** - * Gets a condition that tests whether `v` equals `e + delta`. - * - * If the condition evaluates to `testIsTrue`: - * - `isEq = true` : `v == e + delta` - * - `isEq = false` : `v != e + delta` - */ -SemGuard semEqFlowCond(SemSsaVariable v, SemExpr e, int delta, boolean isEq, boolean testIsTrue) { - exists(boolean eqpolarity | - result.isEquality(semSsaRead(v, delta), e, eqpolarity) and - (testIsTrue = true or testIsTrue = false) and - eqpolarity.booleanXor(testIsTrue).booleanNot() = isEq - ) - or - exists(boolean testIsTrue0 | - semImplies_v2(result, testIsTrue, semEqFlowCond(v, e, delta, isEq, testIsTrue0), testIsTrue0) - ) -} - -/** - * Holds if `v` is an `SsaExplicitUpdate` that equals `e + delta`. - */ -predicate semSsaUpdateStep(SemSsaExplicitUpdate v, SemExpr e, int delta) { - exists(SemExpr defExpr | defExpr = v.getSourceExpr() | - defExpr.(SemCopyValueExpr).getOperand() = e and delta = 0 +module RangeUtil Lang> implements Range::UtilSig { + /** + * Gets an expression that equals `v - d`. + */ + SemExpr semSsaRead(SemSsaVariable v, D::Delta delta) { + // There are various language-specific extension points that can be removed once we no longer + // expect to match the original Java implementation's results exactly. + result = v.getAUse() and delta = D::fromInt(0) or - defExpr.(SemStoreExpr).getOperand() = e and delta = 0 + exists(D::Delta d1, SemConstantIntegerExpr c | + result.(SemAddExpr).hasOperands(semSsaRead(v, d1), c) and + delta = D::fromFloat(D::toFloat(d1) - c.getIntValue()) and + not Lang::ignoreSsaReadArithmeticExpr(result) + ) or - defExpr.(SemAddOneExpr).getOperand() = e and delta = 1 + exists(SemSubExpr sub, D::Delta d1, SemConstantIntegerExpr c | + result = sub and + sub.getLeftOperand() = semSsaRead(v, d1) and + sub.getRightOperand() = c and + delta = D::fromFloat(D::toFloat(d1) + c.getIntValue()) and + not Lang::ignoreSsaReadArithmeticExpr(result) + ) or - defExpr.(SemSubOneExpr).getOperand() = e and delta = -1 + result = v.(SemSsaExplicitUpdate).getSourceExpr() and + delta = D::fromFloat(0) and + not Lang::ignoreSsaReadAssignment(v) or - e = defExpr and - not ( - defExpr instanceof SemCopyValueExpr or - defExpr instanceof SemStoreExpr or - defExpr instanceof SemAddOneExpr or - defExpr instanceof SemSubOneExpr - ) and - delta = 0 - ) -} + result = Lang::specificSsaRead(v, delta) + or + result.(SemCopyValueExpr).getOperand() = semSsaRead(v, delta) and + not Lang::ignoreSsaReadCopy(result) + or + result.(SemStoreExpr).getOperand() = semSsaRead(v, delta) + } -/** - * Holds if `e1 + delta` equals `e2`. - */ -predicate semValueFlowStep(SemExpr e2, SemExpr e1, int delta) { - e2.(SemCopyValueExpr).getOperand() = e1 and delta = 0 - or - e2.(SemStoreExpr).getOperand() = e1 and delta = 0 - or - e2.(SemAddOneExpr).getOperand() = e1 and delta = 1 - or - e2.(SemSubOneExpr).getOperand() = e1 and delta = -1 - or - Specific::additionalValueFlowStep(e2, e1, delta) - or - exists(SemExpr x | e2.(SemAddExpr).hasOperands(e1, x) | - x.(SemConstantIntegerExpr).getIntValue() = delta - ) - or - exists(SemExpr x, SemSubExpr sub | - e2 = sub and - sub.getLeftOperand() = e1 and - sub.getRightOperand() = x - | - x.(SemConstantIntegerExpr).getIntValue() = -delta - ) -} + /** + * Gets a condition that tests whether `v` equals `e + delta`. + * + * If the condition evaluates to `testIsTrue`: + * - `isEq = true` : `v == e + delta` + * - `isEq = false` : `v != e + delta` + */ + SemGuard semEqFlowCond( + SemSsaVariable v, SemExpr e, D::Delta delta, boolean isEq, boolean testIsTrue + ) { + exists(boolean eqpolarity | + result.isEquality(semSsaRead(v, delta), e, eqpolarity) and + (testIsTrue = true or testIsTrue = false) and + eqpolarity.booleanXor(testIsTrue).booleanNot() = isEq + ) + or + exists(boolean testIsTrue0 | + semImplies_v2(result, testIsTrue, semEqFlowCond(v, e, delta, isEq, testIsTrue0), testIsTrue0) + ) + } -/** - * Gets the type used to track the specified expression's range information. - * - * Usually, this just `e.getSemType()`, but the language can override this to track immutable boxed - * primitive types as the underlying primitive type. - */ -SemType getTrackedType(SemExpr e) { - result = Specific::getAlternateType(e) - or - not exists(Specific::getAlternateType(e)) and result = e.getSemType() -} + /** + * Holds if `v` is an `SsaExplicitUpdate` that equals `e + delta`. + */ + predicate semSsaUpdateStep(SemSsaExplicitUpdate v, SemExpr e, D::Delta delta) { + exists(SemExpr defExpr | defExpr = v.getSourceExpr() | + defExpr.(SemCopyValueExpr).getOperand() = e and delta = D::fromFloat(0) + or + defExpr.(SemStoreExpr).getOperand() = e and delta = D::fromFloat(0) + or + defExpr.(SemAddOneExpr).getOperand() = e and delta = D::fromFloat(1) + or + defExpr.(SemSubOneExpr).getOperand() = e and delta = D::fromFloat(-1) + or + e = defExpr and + not ( + defExpr instanceof SemCopyValueExpr or + defExpr instanceof SemStoreExpr or + defExpr instanceof SemAddOneExpr or + defExpr instanceof SemSubOneExpr + ) and + delta = D::fromFloat(0) + ) + } -/** - * Gets the type used to track the specified source variable's range information. - * - * Usually, this just `e.getType()`, but the language can override this to track immutable boxed - * primitive types as the underlying primitive type. - */ -SemType getTrackedTypeForSsaVariable(SemSsaVariable var) { - result = Specific::getAlternateTypeForSsaVariable(var) - or - not exists(Specific::getAlternateTypeForSsaVariable(var)) and result = var.getType() + /** + * Holds if `e1 + delta` equals `e2`. + */ + predicate semValueFlowStep(SemExpr e2, SemExpr e1, D::Delta delta) { + e2.(SemCopyValueExpr).getOperand() = e1 and delta = D::fromFloat(0) + or + e2.(SemStoreExpr).getOperand() = e1 and delta = D::fromFloat(0) + or + e2.(SemAddOneExpr).getOperand() = e1 and delta = D::fromFloat(1) + or + e2.(SemSubOneExpr).getOperand() = e1 and delta = D::fromFloat(-1) + or + Lang::additionalValueFlowStep(e2, e1, delta) + or + exists(SemExpr x | e2.(SemAddExpr).hasOperands(e1, x) | + D::fromInt(x.(SemConstantIntegerExpr).getIntValue()) = delta + ) + or + exists(SemExpr x, SemSubExpr sub | + e2 = sub and + sub.getLeftOperand() = e1 and + sub.getRightOperand() = x + | + D::fromInt(-x.(SemConstantIntegerExpr).getIntValue()) = delta + ) + } + + /** + * Gets the type used to track the specified expression's range information. + * + * Usually, this just `e.getSemType()`, but the language can override this to track immutable boxed + * primitive types as the underlying primitive type. + */ + SemType getTrackedType(SemExpr e) { + result = Lang::getAlternateType(e) + or + not exists(Lang::getAlternateType(e)) and result = e.getSemType() + } + + /** + * Gets the type used to track the specified source variable's range information. + * + * Usually, this just `e.getType()`, but the language can override this to track immutable boxed + * primitive types as the underlying primitive type. + */ + SemType getTrackedTypeForSsaVariable(SemSsaVariable var) { + result = Lang::getAlternateTypeForSsaVariable(var) + or + not exists(Lang::getAlternateTypeForSsaVariable(var)) and result = var.getType() + } } diff --git a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/SignAnalysisCommon.qll b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/SignAnalysisCommon.qll index 970a6c4e5a9..94ef40e83fa 100644 --- a/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/SignAnalysisCommon.qll +++ b/cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/SignAnalysisCommon.qll @@ -6,488 +6,494 @@ * three-valued domain `{negative, zero, positive}`. */ +private import RangeAnalysisStage private import SignAnalysisSpecific as Specific private import experimental.semmle.code.cpp.semantic.Semantic private import ConstantAnalysis private import RangeUtils private import Sign -/** - * An SSA definition for which the analysis can compute the sign. - * - * The actual computation of the sign is done in an override of the `getSign()` predicate. The - * charpred of any subclass must _not_ invoke `getSign()`, directly or indirectly. This ensures - * that the charpred does not introduce negative recursion. The `getSign()` predicate may be - * recursive. - */ -abstract private class SignDef instanceof SemSsaVariable { - final string toString() { result = super.toString() } +module SignAnalysis Utils> { + /** + * An SSA definition for which the analysis can compute the sign. + * + * The actual computation of the sign is done in an override of the `getSign()` predicate. The + * charpred of any subclass must _not_ invoke `getSign()`, directly or indirectly. This ensures + * that the charpred does not introduce negative recursion. The `getSign()` predicate may be + * recursive. + */ + abstract private class SignDef instanceof SemSsaVariable { + final string toString() { result = super.toString() } - /** Gets the possible signs of this SSA definition. */ - abstract Sign getSign(); -} - -/** An SSA definition whose sign is computed based on standard flow. */ -abstract private class FlowSignDef extends SignDef { - abstract override Sign getSign(); -} - -/** An SSA definition whose sign is determined by the sign of that definitions source expression. */ -private class ExplicitSignDef extends FlowSignDef instanceof SemSsaExplicitUpdate { - final override Sign getSign() { result = semExprSign(super.getSourceExpr()) } -} - -/** An SSA Phi definition, whose sign is the union of the signs of its inputs. */ -private class PhiSignDef extends FlowSignDef instanceof SemSsaPhiNode { - final override Sign getSign() { - exists(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge | - edge.phiInput(this, inp) and - result = semSsaSign(inp, edge) - ) - } -} - -/** An SSA definition whose sign is computed by a language-specific implementation. */ -abstract class CustomSignDef extends SignDef { - abstract override Sign getSign(); -} - -/** - * An expression for which the analysis can compute the sign. - * - * The actual computation of the sign is done in an override of the `getSign()` predicate. The - * charpred of any subclass must _not_ invoke `getSign()`, directly or indirectly. This ensures - * that the charpred does not introduce negative recursion. The `getSign()` predicate may be - * recursive. - * - * Concrete implementations extend one of the following subclasses: - * - `ConstantSignExpr`, for expressions with a compile-time constant value. - * - `FlowSignExpr`, for expressions whose sign can be computed from the signs of their operands. - * - `CustomsignExpr`, for expressions whose sign can be computed by a language-specific - * implementation. - * - * If the same expression matches more than one of the above subclasses, the sign is computed as - * follows: - * - The sign of a `ConstantSignExpr` is computed solely from `ConstantSignExpr.getSign()`, - * regardless of any other subclasses. - * - If a non-`ConstantSignExpr` expression matches exactly one of `FlowSignExpr` or - * `CustomSignExpr`, the sign is computed by that class' `getSign()` predicate. - * - If a non-`ConstantSignExpr` expression matches both `FlowSignExpr` and `CustomSignExpr`, the - * sign is the _intersection_ of the signs of those two classes' `getSign()` predicates. Thus, - * both classes have the opportunity to _restrict_ the set of possible signs, not to generate new - * possible signs. - * - If an expression does not match any of the three subclasses, then it can have any sign. - * - * Note that the `getSign()` predicate is introduced only in subclasses of `SignExpr`. - */ -abstract class SignExpr instanceof SemExpr { - SignExpr() { not Specific::ignoreExprSign(this) } - - final string toString() { result = super.toString() } - - abstract Sign getSign(); -} - -/** An expression whose sign is determined by its constant numeric value. */ -private class ConstantSignExpr extends SignExpr { - ConstantSignExpr() { - this instanceof SemConstantIntegerExpr or - exists(this.(SemNumericLiteralExpr).getApproximateFloatValue()) + /** Gets the possible signs of this SSA definition. */ + abstract Sign getSign(); } - final override Sign getSign() { - exists(int i | this.(SemConstantIntegerExpr).getIntValue() = i | - i < 0 and result = TNeg() + /** An SSA definition whose sign is computed based on standard flow. */ + abstract private class FlowSignDef extends SignDef { + abstract override Sign getSign(); + } + + /** An SSA definition whose sign is determined by the sign of that definitions source expression. */ + private class ExplicitSignDef extends FlowSignDef instanceof SemSsaExplicitUpdate { + final override Sign getSign() { result = semExprSign(super.getSourceExpr()) } + } + + /** An SSA Phi definition, whose sign is the union of the signs of its inputs. */ + private class PhiSignDef extends FlowSignDef instanceof SemSsaPhiNode { + final override Sign getSign() { + exists(SemSsaVariable inp, SemSsaReadPositionPhiInputEdge edge | + edge.phiInput(this, inp) and + result = semSsaSign(inp, edge) + ) + } + } + + /** An SSA definition whose sign is computed by a language-specific implementation. */ + abstract class CustomSignDef extends SignDef { + abstract override Sign getSign(); + } + + /** + * An expression for which the analysis can compute the sign. + * + * The actual computation of the sign is done in an override of the `getSign()` predicate. The + * charpred of any subclass must _not_ invoke `getSign()`, directly or indirectly. This ensures + * that the charpred does not introduce negative recursion. The `getSign()` predicate may be + * recursive. + * + * Concrete implementations extend one of the following subclasses: + * - `ConstantSignExpr`, for expressions with a compile-time constant value. + * - `FlowSignExpr`, for expressions whose sign can be computed from the signs of their operands. + * - `CustomsignExpr`, for expressions whose sign can be computed by a language-specific + * implementation. + * + * If the same expression matches more than one of the above subclasses, the sign is computed as + * follows: + * - The sign of a `ConstantSignExpr` is computed solely from `ConstantSignExpr.getSign()`, + * regardless of any other subclasses. + * - If a non-`ConstantSignExpr` expression matches exactly one of `FlowSignExpr` or + * `CustomSignExpr`, the sign is computed by that class' `getSign()` predicate. + * - If a non-`ConstantSignExpr` expression matches both `FlowSignExpr` and `CustomSignExpr`, the + * sign is the _intersection_ of the signs of those two classes' `getSign()` predicates. Thus, + * both classes have the opportunity to _restrict_ the set of possible signs, not to generate new + * possible signs. + * - If an expression does not match any of the three subclasses, then it can have any sign. + * + * Note that the `getSign()` predicate is introduced only in subclasses of `SignExpr`. + */ + abstract class SignExpr instanceof SemExpr { + SignExpr() { not Specific::ignoreExprSign(this) } + + final string toString() { result = super.toString() } + + abstract Sign getSign(); + } + + /** An expression whose sign is determined by its constant numeric value. */ + private class ConstantSignExpr extends SignExpr { + ConstantSignExpr() { + this instanceof SemConstantIntegerExpr or + exists(this.(SemNumericLiteralExpr).getApproximateFloatValue()) + } + + final override Sign getSign() { + exists(int i | this.(SemConstantIntegerExpr).getIntValue() = i | + i < 0 and result = TNeg() + or + i = 0 and result = TZero() + or + i > 0 and result = TPos() + ) or - i = 0 and result = TZero() - or - i > 0 and result = TPos() - ) - or - not exists(this.(SemConstantIntegerExpr).getIntValue()) and - exists(float f | f = this.(SemNumericLiteralExpr).getApproximateFloatValue() | - f < 0 and result = TNeg() - or - f = 0 and result = TZero() - or - f > 0 and result = TPos() - ) - } -} - -abstract private class NonConstantSignExpr extends SignExpr { - NonConstantSignExpr() { not this instanceof ConstantSignExpr } - - final override Sign getSign() { - // The result is the _intersection_ of the signs computed from flow and by the language. - (result = this.(FlowSignExpr).getSignRestriction() or not this instanceof FlowSignExpr) and - (result = this.(CustomSignExpr).getSignRestriction() or not this instanceof CustomSignExpr) - } -} - -/** An expression whose sign is computed from the signs of its operands. */ -abstract private class FlowSignExpr extends NonConstantSignExpr { - abstract Sign getSignRestriction(); -} - -/** An expression whose sign is computed by a language-specific implementation. */ -abstract class CustomSignExpr extends NonConstantSignExpr { - abstract Sign getSignRestriction(); -} - -/** An expression whose sign is unknown. */ -private class UnknownSignExpr extends SignExpr { - UnknownSignExpr() { - not this instanceof FlowSignExpr and - not this instanceof CustomSignExpr and - not this instanceof ConstantSignExpr and - ( - // Only track numeric types. - getTrackedType(this) instanceof SemNumericType - or - // Unless the language says to track this expression anyway. - Specific::trackUnknownNonNumericExpr(this) - ) + not exists(this.(SemConstantIntegerExpr).getIntValue()) and + exists(float f | f = this.(SemNumericLiteralExpr).getApproximateFloatValue() | + f < 0 and result = TNeg() + or + f = 0 and result = TZero() + or + f > 0 and result = TPos() + ) + } } - final override Sign getSign() { semAnySign(result) } -} + abstract private class NonConstantSignExpr extends SignExpr { + NonConstantSignExpr() { not this instanceof ConstantSignExpr } -/** - * A `Load` expression whose sign is computed from the sign of its SSA definition, restricted by - * inference from any intervening guards. - */ -class UseSignExpr extends FlowSignExpr { - SemSsaVariable v; - - UseSignExpr() { v.getAUse() = this } - - override Sign getSignRestriction() { - // Propagate via SSA - // Propagate the sign from the def of `v`, incorporating any inference from guards. - result = semSsaSign(v, any(SemSsaReadPositionBlock bb | bb.getAnExpr() = this)) - or - // No block for this read. Just use the sign of the def. - // REVIEW: How can this happen? - not exists(SemSsaReadPositionBlock bb | bb.getAnExpr() = this) and - result = semSsaDefSign(v) + final override Sign getSign() { + // The result is the _intersection_ of the signs computed from flow and by the language. + (result = this.(FlowSignExpr).getSignRestriction() or not this instanceof FlowSignExpr) and + (result = this.(CustomSignExpr).getSignRestriction() or not this instanceof CustomSignExpr) + } } -} -/** A binary expression whose sign is computed from the signs of its operands. */ -private class BinarySignExpr extends FlowSignExpr { - SemBinaryExpr binary; + /** An expression whose sign is computed from the signs of its operands. */ + abstract private class FlowSignExpr extends NonConstantSignExpr { + abstract Sign getSignRestriction(); + } - BinarySignExpr() { binary = this } + /** An expression whose sign is computed by a language-specific implementation. */ + abstract class CustomSignExpr extends NonConstantSignExpr { + abstract Sign getSignRestriction(); + } - override Sign getSignRestriction() { - exists(SemExpr left, SemExpr right | - binaryExprOperands(binary, left, right) and + /** An expression whose sign is unknown. */ + private class UnknownSignExpr extends SignExpr { + UnknownSignExpr() { + not this instanceof FlowSignExpr and + not this instanceof CustomSignExpr and + not this instanceof ConstantSignExpr and + ( + // Only track numeric types. + Utils::getTrackedType(this) instanceof SemNumericType + or + // Unless the language says to track this expression anyway. + Specific::trackUnknownNonNumericExpr(this) + ) + } + + final override Sign getSign() { semAnySign(result) } + } + + /** + * A `Load` expression whose sign is computed from the sign of its SSA definition, restricted by + * inference from any intervening guards. + */ + class UseSignExpr extends FlowSignExpr { + SemSsaVariable v; + + UseSignExpr() { v.getAUse() = this } + + override Sign getSignRestriction() { + // Propagate via SSA + // Propagate the sign from the def of `v`, incorporating any inference from guards. + result = semSsaSign(v, any(SemSsaReadPositionBlock bb | bb.getAnExpr() = this)) + or + // No block for this read. Just use the sign of the def. + // REVIEW: How can this happen? + not exists(SemSsaReadPositionBlock bb | bb.getAnExpr() = this) and + result = semSsaDefSign(v) + } + } + + /** A binary expression whose sign is computed from the signs of its operands. */ + private class BinarySignExpr extends FlowSignExpr { + SemBinaryExpr binary; + + BinarySignExpr() { binary = this } + + override Sign getSignRestriction() { + exists(SemExpr left, SemExpr right | + binaryExprOperands(binary, left, right) and + result = + semExprSign(pragma[only_bind_out](left)) + .applyBinaryOp(semExprSign(pragma[only_bind_out](right)), binary.getOpcode()) + ) + or + exists(SemDivExpr div | div = binary | + result = semExprSign(div.getLeftOperand()) and + result != TZero() and + div.getRightOperand().(SemFloatingPointLiteralExpr).getFloatValue() = 0 + ) + } + } + + pragma[nomagic] + private predicate binaryExprOperands(SemBinaryExpr binary, SemExpr left, SemExpr right) { + binary.getLeftOperand() = left and binary.getRightOperand() = right + } + + /** + * A `Convert`, `Box`, or `Unbox` expression. + */ + private class SemCastExpr instanceof SemUnaryExpr { + string toString() { result = super.toString() } + + SemCastExpr() { + this instanceof SemConvertExpr + or + this instanceof SemBoxExpr + or + this instanceof SemUnboxExpr + } + } + + /** A unary expression whose sign is computed from the sign of its operand. */ + private class UnarySignExpr extends FlowSignExpr { + SemUnaryExpr unary; + + UnarySignExpr() { unary = this and not this instanceof SemCastExpr } + + override Sign getSignRestriction() { result = - semExprSign(pragma[only_bind_out](left)) - .applyBinaryOp(semExprSign(pragma[only_bind_out](right)), binary.getOpcode()) - ) - or - exists(SemDivExpr div | div = binary | - result = semExprSign(div.getLeftOperand()) and - result != TZero() and - div.getRightOperand().(SemFloatingPointLiteralExpr).getFloatValue() = 0 + semExprSign(pragma[only_bind_out](unary.getOperand())).applyUnaryOp(unary.getOpcode()) + } + } + + /** + * A `Convert`, `Box`, or `Unbox` expression, whose sign is computed based on + * the sign of its operand and the source and destination types. + */ + abstract private class CastSignExpr extends FlowSignExpr { + SemUnaryExpr cast; + + CastSignExpr() { cast = this and cast instanceof SemCastExpr } + + override Sign getSignRestriction() { result = semExprSign(cast.getOperand()) } + } + + /** + * A `Convert` expression. + */ + private class ConvertSignExpr extends CastSignExpr { + override SemConvertExpr cast; + } + + /** + * A `Box` expression. + */ + private class BoxSignExpr extends CastSignExpr { + override SemBoxExpr cast; + } + + /** + * An `Unbox` expression. + */ + private class UnboxSignExpr extends CastSignExpr { + override SemUnboxExpr cast; + + UnboxSignExpr() { + exists(SemType fromType | fromType = Utils::getTrackedType(cast.getOperand()) | + // Only numeric source types are handled here. + fromType instanceof SemNumericType + ) + } + } + + private predicate unknownSign(SemExpr e) { e instanceof UnknownSignExpr } + + /** + * Holds if `lowerbound` is a lower bound for `v` at `pos`. This is restricted + * to only include bounds for which we might determine a sign. + */ + private predicate lowerBound( + SemExpr lowerbound, SemSsaVariable v, SemSsaReadPosition pos, boolean isStrict + ) { + exists(boolean testIsTrue, SemRelationalExpr comp | + pos.hasReadOfVar(v) and + semGuardControlsSsaRead(semGetComparisonGuard(comp), pos, testIsTrue) and + not unknownSign(lowerbound) + | + testIsTrue = true and + comp.getLesserOperand() = lowerbound and + comp.getGreaterOperand() = Utils::semSsaRead(v, D::fromInt(0)) and + (if comp.isStrict() then isStrict = true else isStrict = false) + or + testIsTrue = false and + comp.getGreaterOperand() = lowerbound and + comp.getLesserOperand() = Utils::semSsaRead(v, D::fromInt(0)) and + (if comp.isStrict() then isStrict = false else isStrict = true) ) } -} -pragma[nomagic] -private predicate binaryExprOperands(SemBinaryExpr binary, SemExpr left, SemExpr right) { - binary.getLeftOperand() = left and binary.getRightOperand() = right -} - -/** - * A `Convert`, `Box`, or `Unbox` expression. - */ -private class SemCastExpr extends SemUnaryExpr { - SemCastExpr() { - this instanceof SemConvertExpr - or - this instanceof SemBoxExpr - or - this instanceof SemUnboxExpr - } -} - -/** A unary expression whose sign is computed from the sign of its operand. */ -private class UnarySignExpr extends FlowSignExpr { - SemUnaryExpr unary; - - UnarySignExpr() { unary = this and not this instanceof SemCastExpr } - - override Sign getSignRestriction() { - result = semExprSign(pragma[only_bind_out](unary.getOperand())).applyUnaryOp(unary.getOpcode()) - } -} - -/** - * A `Convert`, `Box`, or `Unbox` expression, whose sign is computed based on - * the sign of its operand and the source and destination types. - */ -abstract private class CastSignExpr extends FlowSignExpr { - SemUnaryExpr cast; - - CastSignExpr() { cast = this and cast instanceof SemCastExpr } - - override Sign getSignRestriction() { result = semExprSign(cast.getOperand()) } -} - -/** - * A `Convert` expression. - */ -private class ConvertSignExpr extends CastSignExpr { - override SemConvertExpr cast; -} - -/** - * A `Box` expression. - */ -private class BoxSignExpr extends CastSignExpr { - override SemBoxExpr cast; -} - -/** - * An `Unbox` expression. - */ -private class UnboxSignExpr extends CastSignExpr { - override SemUnboxExpr cast; - - UnboxSignExpr() { - exists(SemType fromType | fromType = getTrackedType(cast.getOperand()) | - // Only numeric source types are handled here. - fromType instanceof SemNumericType + /** + * Holds if `upperbound` is an upper bound for `v` at `pos`. This is restricted + * to only include bounds for which we might determine a sign. + */ + private predicate upperBound( + SemExpr upperbound, SemSsaVariable v, SemSsaReadPosition pos, boolean isStrict + ) { + exists(boolean testIsTrue, SemRelationalExpr comp | + pos.hasReadOfVar(v) and + semGuardControlsSsaRead(semGetComparisonGuard(comp), pos, testIsTrue) and + not unknownSign(upperbound) + | + testIsTrue = true and + comp.getGreaterOperand() = upperbound and + comp.getLesserOperand() = Utils::semSsaRead(v, D::fromInt(0)) and + (if comp.isStrict() then isStrict = true else isStrict = false) + or + testIsTrue = false and + comp.getLesserOperand() = upperbound and + comp.getGreaterOperand() = Utils::semSsaRead(v, D::fromInt(0)) and + (if comp.isStrict() then isStrict = false else isStrict = true) ) } -} -private predicate unknownSign(SemExpr e) { e instanceof UnknownSignExpr } + /** + * Holds if `eqbound` is an equality/inequality for `v` at `pos`. This is + * restricted to only include bounds for which we might determine a sign. The + * boolean `isEq` gives the polarity: + * - `isEq = true` : `v = eqbound` + * - `isEq = false` : `v != eqbound` + */ + private predicate eqBound(SemExpr eqbound, SemSsaVariable v, SemSsaReadPosition pos, boolean isEq) { + exists(SemGuard guard, boolean testIsTrue, boolean polarity | + pos.hasReadOfVar(v) and + semGuardControlsSsaRead(guard, pos, testIsTrue) and + guard.isEquality(eqbound, Utils::semSsaRead(v, D::fromInt(0)), polarity) and + isEq = polarity.booleanXor(testIsTrue).booleanNot() and + not unknownSign(eqbound) + ) + } -/** - * Holds if `lowerbound` is a lower bound for `v` at `pos`. This is restricted - * to only include bounds for which we might determine a sign. - */ -private predicate lowerBound( - SemExpr lowerbound, SemSsaVariable v, SemSsaReadPosition pos, boolean isStrict -) { - exists(boolean testIsTrue, SemRelationalExpr comp | - pos.hasReadOfVar(v) and - semGuardControlsSsaRead(semGetComparisonGuard(comp), pos, testIsTrue) and - not unknownSign(lowerbound) - | - testIsTrue = true and - comp.getLesserOperand() = lowerbound and - comp.getGreaterOperand() = semSsaRead(v, 0) and - (if comp.isStrict() then isStrict = true else isStrict = false) + /** + * Holds if `bound` is a bound for `v` at `pos` that needs to be positive in + * order for `v` to be positive. + */ + private predicate posBound(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { + upperBound(bound, v, pos, _) or + eqBound(bound, v, pos, true) + } + + /** + * Holds if `bound` is a bound for `v` at `pos` that needs to be negative in + * order for `v` to be negative. + */ + private predicate negBound(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { + lowerBound(bound, v, pos, _) or + eqBound(bound, v, pos, true) + } + + /** + * Holds if `bound` is a bound for `v` at `pos` that can restrict whether `v` + * can be zero. + */ + private predicate zeroBound(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { + lowerBound(bound, v, pos, _) or + upperBound(bound, v, pos, _) or + eqBound(bound, v, pos, _) + } + + /** Holds if `bound` allows `v` to be positive at `pos`. */ + private predicate posBoundOk(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { + posBound(bound, v, pos) and TPos() = semExprSign(bound) + } + + /** Holds if `bound` allows `v` to be negative at `pos`. */ + private predicate negBoundOk(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { + negBound(bound, v, pos) and TNeg() = semExprSign(bound) + } + + /** Holds if `bound` allows `v` to be zero at `pos`. */ + private predicate zeroBoundOk(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { + lowerBound(bound, v, pos, _) and TNeg() = semExprSign(bound) or - testIsTrue = false and - comp.getGreaterOperand() = lowerbound and - comp.getLesserOperand() = semSsaRead(v, 0) and - (if comp.isStrict() then isStrict = false else isStrict = true) - ) -} - -/** - * Holds if `upperbound` is an upper bound for `v` at `pos`. This is restricted - * to only include bounds for which we might determine a sign. - */ -private predicate upperBound( - SemExpr upperbound, SemSsaVariable v, SemSsaReadPosition pos, boolean isStrict -) { - exists(boolean testIsTrue, SemRelationalExpr comp | - pos.hasReadOfVar(v) and - semGuardControlsSsaRead(semGetComparisonGuard(comp), pos, testIsTrue) and - not unknownSign(upperbound) - | - testIsTrue = true and - comp.getGreaterOperand() = upperbound and - comp.getLesserOperand() = semSsaRead(v, 0) and - (if comp.isStrict() then isStrict = true else isStrict = false) + lowerBound(bound, v, pos, false) and TZero() = semExprSign(bound) or - testIsTrue = false and - comp.getLesserOperand() = upperbound and - comp.getGreaterOperand() = semSsaRead(v, 0) and - (if comp.isStrict() then isStrict = false else isStrict = true) - ) -} + upperBound(bound, v, pos, _) and TPos() = semExprSign(bound) + or + upperBound(bound, v, pos, false) and TZero() = semExprSign(bound) + or + eqBound(bound, v, pos, true) and TZero() = semExprSign(bound) + or + eqBound(bound, v, pos, false) and TZero() != semExprSign(bound) + } -/** - * Holds if `eqbound` is an equality/inequality for `v` at `pos`. This is - * restricted to only include bounds for which we might determine a sign. The - * boolean `isEq` gives the polarity: - * - `isEq = true` : `v = eqbound` - * - `isEq = false` : `v != eqbound` - */ -private predicate eqBound(SemExpr eqbound, SemSsaVariable v, SemSsaReadPosition pos, boolean isEq) { - exists(SemGuard guard, boolean testIsTrue, boolean polarity | + /** + * Holds if there is a bound that might restrict whether `v` has the sign `s` + * at `pos`. + */ + private predicate hasGuard(SemSsaVariable v, SemSsaReadPosition pos, Sign s) { + s = TPos() and posBound(_, v, pos) + or + s = TNeg() and negBound(_, v, pos) + or + s = TZero() and zeroBound(_, v, pos) + } + + /** + * Gets a possible sign of `v` at `pos` based on its definition, where the sign + * might be ruled out by a guard. + */ + pragma[noinline] + private Sign guardedSsaSign(SemSsaVariable v, SemSsaReadPosition pos) { + result = semSsaDefSign(v) and pos.hasReadOfVar(v) and - semGuardControlsSsaRead(guard, pos, testIsTrue) and - guard.isEquality(eqbound, semSsaRead(v, 0), polarity) and - isEq = polarity.booleanXor(testIsTrue).booleanNot() and - not unknownSign(eqbound) - ) -} - -/** - * Holds if `bound` is a bound for `v` at `pos` that needs to be positive in - * order for `v` to be positive. - */ -private predicate posBound(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { - upperBound(bound, v, pos, _) or - eqBound(bound, v, pos, true) -} - -/** - * Holds if `bound` is a bound for `v` at `pos` that needs to be negative in - * order for `v` to be negative. - */ -private predicate negBound(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { - lowerBound(bound, v, pos, _) or - eqBound(bound, v, pos, true) -} - -/** - * Holds if `bound` is a bound for `v` at `pos` that can restrict whether `v` - * can be zero. - */ -private predicate zeroBound(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { - lowerBound(bound, v, pos, _) or - upperBound(bound, v, pos, _) or - eqBound(bound, v, pos, _) -} - -/** Holds if `bound` allows `v` to be positive at `pos`. */ -private predicate posBoundOk(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { - posBound(bound, v, pos) and TPos() = semExprSign(bound) -} - -/** Holds if `bound` allows `v` to be negative at `pos`. */ -private predicate negBoundOk(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { - negBound(bound, v, pos) and TNeg() = semExprSign(bound) -} - -/** Holds if `bound` allows `v` to be zero at `pos`. */ -private predicate zeroBoundOk(SemExpr bound, SemSsaVariable v, SemSsaReadPosition pos) { - lowerBound(bound, v, pos, _) and TNeg() = semExprSign(bound) - or - lowerBound(bound, v, pos, false) and TZero() = semExprSign(bound) - or - upperBound(bound, v, pos, _) and TPos() = semExprSign(bound) - or - upperBound(bound, v, pos, false) and TZero() = semExprSign(bound) - or - eqBound(bound, v, pos, true) and TZero() = semExprSign(bound) - or - eqBound(bound, v, pos, false) and TZero() != semExprSign(bound) -} - -/** - * Holds if there is a bound that might restrict whether `v` has the sign `s` - * at `pos`. - */ -private predicate hasGuard(SemSsaVariable v, SemSsaReadPosition pos, Sign s) { - s = TPos() and posBound(_, v, pos) - or - s = TNeg() and negBound(_, v, pos) - or - s = TZero() and zeroBound(_, v, pos) -} - -/** - * Gets a possible sign of `v` at `pos` based on its definition, where the sign - * might be ruled out by a guard. - */ -pragma[noinline] -private Sign guardedSsaSign(SemSsaVariable v, SemSsaReadPosition pos) { - result = semSsaDefSign(v) and - pos.hasReadOfVar(v) and - hasGuard(v, pos, result) -} - -/** - * Gets a possible sign of `v` at `pos` based on its definition, where no guard - * can rule it out. - */ -pragma[noinline] -private Sign unguardedSsaSign(SemSsaVariable v, SemSsaReadPosition pos) { - result = semSsaDefSign(v) and - pos.hasReadOfVar(v) and - not hasGuard(v, pos, result) -} - -/** - * Gets a possible sign of `v` at read position `pos`, where a guard could have - * ruled out the sign but does not. - * This does not check that the definition of `v` also allows the sign. - */ -private Sign guardedSsaSignOk(SemSsaVariable v, SemSsaReadPosition pos) { - result = TPos() and - forex(SemExpr bound | posBound(bound, v, pos) | posBoundOk(bound, v, pos)) - or - result = TNeg() and - forex(SemExpr bound | negBound(bound, v, pos) | negBoundOk(bound, v, pos)) - or - result = TZero() and - forex(SemExpr bound | zeroBound(bound, v, pos) | zeroBoundOk(bound, v, pos)) -} - -/** Gets a possible sign for `v` at `pos`. */ -private Sign semSsaSign(SemSsaVariable v, SemSsaReadPosition pos) { - result = unguardedSsaSign(v, pos) - or - result = guardedSsaSign(v, pos) and - result = guardedSsaSignOk(v, pos) -} - -/** Gets a possible sign for `v`. */ -pragma[nomagic] -Sign semSsaDefSign(SemSsaVariable v) { result = v.(SignDef).getSign() } - -/** Gets a possible sign for `e`. */ -cached -Sign semExprSign(SemExpr e) { - exists(Sign s | s = e.(SignExpr).getSign() | - if - getTrackedType(e) instanceof SemUnsignedIntegerType and - s = TNeg() and - not Specific::ignoreTypeRestrictions(e) - then result = TPos() - else result = s - ) -} - -/** - * Dummy predicate that holds for any sign. This is added to improve readability - * of cases where the sign is unrestricted. - */ -predicate semAnySign(Sign s) { any() } - -/** Holds if `e` can be positive and cannot be negative. */ -predicate semPositive(SemExpr e) { - semExprSign(e) = TPos() and - not semExprSign(e) = TNeg() -} - -/** Holds if `e` can be negative and cannot be positive. */ -predicate semNegative(SemExpr e) { - semExprSign(e) = TNeg() and - not semExprSign(e) = TPos() -} - -/** Holds if `e` is strictly positive. */ -predicate semStrictlyPositive(SemExpr e) { - semExprSign(e) = TPos() and - not semExprSign(e) = TNeg() and - not semExprSign(e) = TZero() -} - -/** Holds if `e` is strictly negative. */ -predicate semStrictlyNegative(SemExpr e) { - semExprSign(e) = TNeg() and - not semExprSign(e) = TPos() and - not semExprSign(e) = TZero() + hasGuard(v, pos, result) + } + + /** + * Gets a possible sign of `v` at `pos` based on its definition, where no guard + * can rule it out. + */ + pragma[noinline] + private Sign unguardedSsaSign(SemSsaVariable v, SemSsaReadPosition pos) { + result = semSsaDefSign(v) and + pos.hasReadOfVar(v) and + not hasGuard(v, pos, result) + } + + /** + * Gets a possible sign of `v` at read position `pos`, where a guard could have + * ruled out the sign but does not. + * This does not check that the definition of `v` also allows the sign. + */ + private Sign guardedSsaSignOk(SemSsaVariable v, SemSsaReadPosition pos) { + result = TPos() and + forex(SemExpr bound | posBound(bound, v, pos) | posBoundOk(bound, v, pos)) + or + result = TNeg() and + forex(SemExpr bound | negBound(bound, v, pos) | negBoundOk(bound, v, pos)) + or + result = TZero() and + forex(SemExpr bound | zeroBound(bound, v, pos) | zeroBoundOk(bound, v, pos)) + } + + /** Gets a possible sign for `v` at `pos`. */ + private Sign semSsaSign(SemSsaVariable v, SemSsaReadPosition pos) { + result = unguardedSsaSign(v, pos) + or + result = guardedSsaSign(v, pos) and + result = guardedSsaSignOk(v, pos) + } + + /** Gets a possible sign for `v`. */ + pragma[nomagic] + Sign semSsaDefSign(SemSsaVariable v) { result = v.(SignDef).getSign() } + + /** Gets a possible sign for `e`. */ + cached + Sign semExprSign(SemExpr e) { + exists(Sign s | s = e.(SignExpr).getSign() | + if + Utils::getTrackedType(e) instanceof SemUnsignedIntegerType and + s = TNeg() and + not Specific::ignoreTypeRestrictions(e) + then result = TPos() + else result = s + ) + } + + /** + * Dummy predicate that holds for any sign. This is added to improve readability + * of cases where the sign is unrestricted. + */ + predicate semAnySign(Sign s) { any() } + + /** Holds if `e` can be positive and cannot be negative. */ + predicate semPositive(SemExpr e) { + semExprSign(e) = TPos() and + not semExprSign(e) = TNeg() + } + + /** Holds if `e` can be negative and cannot be positive. */ + predicate semNegative(SemExpr e) { + semExprSign(e) = TNeg() and + not semExprSign(e) = TPos() + } + + /** Holds if `e` is strictly positive. */ + predicate semStrictlyPositive(SemExpr e) { + semExprSign(e) = TPos() and + not semExprSign(e) = TNeg() and + not semExprSign(e) = TZero() + } + + /** Holds if `e` is strictly negative. */ + predicate semStrictlyNegative(SemExpr e) { + semExprSign(e) = TNeg() and + not semExprSign(e) = TPos() and + not semExprSign(e) = TZero() + } } diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index 49261b900a7..12652819688 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 0.5.1-dev +version: 0.5.2-dev groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/lib/semmle/code/cpp/Location.qll b/cpp/ql/lib/semmle/code/cpp/Location.qll index 2b2a06ac474..fd5d2d34c5d 100644 --- a/cpp/ql/lib/semmle/code/cpp/Location.qll +++ b/cpp/ql/lib/semmle/code/cpp/Location.qll @@ -10,12 +10,14 @@ import semmle.code.cpp.File */ class Location extends @location { /** Gets the container corresponding to this location. */ + pragma[nomagic] Container getContainer() { this.fullLocationInfo(result, _, _, _, _) } /** Gets the file corresponding to this location, if any. */ File getFile() { result = this.getContainer() } /** Gets the 1-based line number (inclusive) where this location starts. */ + pragma[nomagic] int getStartLine() { this.fullLocationInfo(_, result, _, _, _) } /** Gets the 1-based column number (inclusive) where this location starts. */ diff --git a/cpp/ql/lib/semmle/code/cpp/dataflow/old/internal/DataFlowImplConsistency.qll b/cpp/ql/lib/semmle/code/cpp/dataflow/old/internal/DataFlowImplConsistency.qll index 533899e8a85..9bbc70fbdf9 100644 --- a/cpp/ql/lib/semmle/code/cpp/dataflow/old/internal/DataFlowImplConsistency.qll +++ b/cpp/ql/lib/semmle/code/cpp/dataflow/old/internal/DataFlowImplConsistency.qll @@ -45,6 +45,16 @@ module Consistency { ) { none() } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodeAtPosition`. */ + predicate uniqueParameterNodeAtPositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodePosition`. */ + predicate uniqueParameterNodePositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } } private class RelevantNode extends Node { @@ -246,6 +256,7 @@ module Consistency { query predicate uniqueParameterNodeAtPosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodeAtPositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(Node p0 | isParameterNode(p0, c, pos))) and msg = "Parameters with overlapping positions." @@ -254,6 +265,7 @@ module Consistency { query predicate uniqueParameterNodePosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodePositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(ParameterPosition pos0 | isParameterNode(p, c, pos0))) and msg = "Parameter node with multiple positions." diff --git a/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll b/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll index 533899e8a85..9bbc70fbdf9 100644 --- a/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll +++ b/cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowImplConsistency.qll @@ -45,6 +45,16 @@ module Consistency { ) { none() } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodeAtPosition`. */ + predicate uniqueParameterNodeAtPositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodePosition`. */ + predicate uniqueParameterNodePositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } } private class RelevantNode extends Node { @@ -246,6 +256,7 @@ module Consistency { query predicate uniqueParameterNodeAtPosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodeAtPositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(Node p0 | isParameterNode(p0, c, pos))) and msg = "Parameters with overlapping positions." @@ -254,6 +265,7 @@ module Consistency { query predicate uniqueParameterNodePosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodePositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(ParameterPosition pos0 | isParameterNode(p, c, pos0))) and msg = "Parameter node with multiple positions." diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/Opcode.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/Opcode.qll index c4134d240ab..b4def7fe4ae 100644 --- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/Opcode.qll +++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/Opcode.qll @@ -30,6 +30,7 @@ private newtype TOpcode = TNegate() or TShiftLeft() or TShiftRight() or + TUnsignedShiftRight() or TBitAnd() or TBitOr() or TBitXor() or @@ -652,6 +653,15 @@ module Opcode { final override string toString() { result = "ShiftRight" } } + /** + * The `Opcode` for a `UnsignedShiftRightInstruction`. + * + * See the `UnsignedShiftRightInstruction` documentation for more details. + */ + class UnsignedShiftRight extends BinaryBitwiseOpcode, TUnsignedShiftRight { + final override string toString() { result = "UnsignedShiftRight" } + } + /** * The `Opcode` for a `BitAndInstruction`. * diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/Instruction.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/Instruction.qll index 7afe954023b..0aa7c552638 100644 --- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/Instruction.qll +++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/aliased_ssa/Instruction.qll @@ -1204,6 +1204,17 @@ class ShiftRightInstruction extends BinaryBitwiseInstruction { ShiftRightInstruction() { this.getOpcode() instanceof Opcode::ShiftRight } } +/** + * An instruction that shifts its left operand to the right by the number of bits specified by its + * right operand. + * + * Both operands must have an integer type. The result has the same type as the left operand. + * The leftmost bits are zero-filled. + */ +class UnsignedShiftRightInstruction extends BinaryBitwiseInstruction { + UnsignedShiftRightInstruction() { this.getOpcode() instanceof Opcode::UnsignedShiftRight } +} + /** * An instruction that performs a binary arithmetic operation involving at least one pointer * operand. diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/Instruction.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/Instruction.qll index 7afe954023b..0aa7c552638 100644 --- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/Instruction.qll +++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/raw/Instruction.qll @@ -1204,6 +1204,17 @@ class ShiftRightInstruction extends BinaryBitwiseInstruction { ShiftRightInstruction() { this.getOpcode() instanceof Opcode::ShiftRight } } +/** + * An instruction that shifts its left operand to the right by the number of bits specified by its + * right operand. + * + * Both operands must have an integer type. The result has the same type as the left operand. + * The leftmost bits are zero-filled. + */ +class UnsignedShiftRightInstruction extends BinaryBitwiseInstruction { + UnsignedShiftRightInstruction() { this.getOpcode() instanceof Opcode::UnsignedShiftRight } +} + /** * An instruction that performs a binary arithmetic operation involving at least one pointer * operand. diff --git a/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/Instruction.qll b/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/Instruction.qll index 7afe954023b..0aa7c552638 100644 --- a/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/Instruction.qll +++ b/cpp/ql/lib/semmle/code/cpp/ir/implementation/unaliased_ssa/Instruction.qll @@ -1204,6 +1204,17 @@ class ShiftRightInstruction extends BinaryBitwiseInstruction { ShiftRightInstruction() { this.getOpcode() instanceof Opcode::ShiftRight } } +/** + * An instruction that shifts its left operand to the right by the number of bits specified by its + * right operand. + * + * Both operands must have an integer type. The result has the same type as the left operand. + * The leftmost bits are zero-filled. + */ +class UnsignedShiftRightInstruction extends BinaryBitwiseInstruction { + UnsignedShiftRightInstruction() { this.getOpcode() instanceof Opcode::UnsignedShiftRight } +} + /** * An instruction that performs a binary arithmetic operation involving at least one pointer * operand. diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 853c3263cb4..4a82d185a5b 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.5.1 + +### Minor Analysis Improvements + +* The `cpp/no-space-for-terminator` and `cpp/uncontrolled-allocation-size` queries have been enhanced with heuristic detection of allocations. These queries now find more results. + ## 0.5.0 ### Minor Analysis Improvements diff --git a/cpp/ql/src/Critical/MissingCheckScanf.ql b/cpp/ql/src/Critical/MissingCheckScanf.ql index 29f1c2b07ad..994d5e42735 100644 --- a/cpp/ql/src/Critical/MissingCheckScanf.ql +++ b/cpp/ql/src/Critical/MissingCheckScanf.ql @@ -20,81 +20,190 @@ import semmle.code.cpp.dataflow.DataFlow import semmle.code.cpp.ir.IR import semmle.code.cpp.ir.ValueNumbering -/** An expression appearing as an output argument to a `scanf`-like call */ -class ScanfOutput extends Expr { - ScanfFunctionCall call; - int varargIndex; - Instruction instr; - ValueNumber valNum; +/** + * Holds if `call` is a `scanf`-like function that may write to `output` at index `index`. + * + * Furthermore, `instr` is the instruction that defines the address of the `index`'th argument + * of `call`, and `vn` is the value number of `instr.` + */ +predicate isSource(ScanfFunctionCall call, int index, Instruction instr, ValueNumber vn, Expr output) { + output = call.getOutputArgument(index).getFullyConverted() and + instr.getConvertedResultExpression() = output and + vn.getAnInstruction() = instr +} - ScanfOutput() { - this = call.getOutputArgument(varargIndex).getFullyConverted() and - instr.getConvertedResultExpression() = this and - valueNumber(instr) = valNum - } +/** + * Holds if `instr` is control-flow reachable in 0 or more steps from + * a call to a `scanf`-like function. + */ +pragma[nomagic] +predicate fwdFlow0(Instruction instr) { + isSource(_, _, instr, _, _) + or + exists(Instruction prev | + fwdFlow0(prev) and + prev.getASuccessor() = instr + ) +} - ScanfFunctionCall getCall() { result = call } +/** + * Holds if `instr` is part of the IR translation of `access` that + * is not an expression being deallocated, and `instr` has value + * number `vn`. + */ +predicate isSink(Instruction instr, Access access, ValueNumber vn) { + instr.getAst() = access and + not any(DeallocationExpr dealloc).getFreedExpr() = access and + vn.getAnInstruction() = instr +} - /** - * Returns the smallest possible `scanf` return value that would indicate - * success in writing this output argument. - */ - int getMinimumGuardConstant() { - result = - varargIndex + 1 - - count(ScanfFormatLiteral f, int n | - // Special case: %n writes to an argument without reading any input. - // It does not increase the count returned by `scanf`. - n <= varargIndex and f.getUse() = call and f.getConversionChar(n) = "n" - ) - } - - predicate hasGuardedAccess(Access e, boolean isGuarded) { - e = this.getAnAccess() and - if - exists(int value, int minGuard | minGuard = this.getMinimumGuardConstant() | - e.getBasicBlock() = blockGuardedBy(value, "==", call) and minGuard <= value - or - e.getBasicBlock() = blockGuardedBy(value, "<", call) and minGuard - 1 <= value - or - e.getBasicBlock() = blockGuardedBy(value, "<=", call) and minGuard <= value - ) - then isGuarded = true - else isGuarded = false - } - - /** - * Get a subsequent access of the same underlying storage, - * but before it gets reset or reused in another `scanf` call. - */ - Access getAnAccess() { - exists(Instruction dst | - this.bigStep() = dst and - dst.getAst() = result and - valueNumber(dst) = valNum - ) - } - - private Instruction bigStep() { - result = this.smallStep(instr) +/** + * Holds if `instr` is part of a path from a call to a `scanf`-like function + * to a use of the written variable. + */ +pragma[nomagic] +predicate revFlow0(Instruction instr) { + fwdFlow0(instr) and + ( + isSink(instr, _, _) or - exists(Instruction i | i = this.bigStep() | result = this.smallStep(i)) - } + exists(Instruction succ | revFlow0(succ) | instr.getASuccessor() = succ) + ) +} - private Instruction smallStep(Instruction i) { - instr.getASuccessor*() = i and - i.getASuccessor() = result and - not this.isBarrier(result) - } - - private predicate isBarrier(Instruction i) { - valueNumber(i) = valNum and - exists(Expr e | i.getAst() = e | - i = any(StoreInstruction s).getDestinationAddress() - or - [e, e.getParent().(AddressOfExpr)] instanceof ScanfOutput +/** + * Holds if `instr` is part of a path from a call to a `scanf`-like function + * that writes to a variable with value number `vn`, without passing through + * redefinitions of the variable. + */ +pragma[nomagic] +private predicate fwdFlow(Instruction instr, ValueNumber vn) { + revFlow0(instr) and + ( + isSource(_, _, instr, vn, _) + or + exists(Instruction prev | + fwdFlow(prev, vn) and + prev.getASuccessor() = instr and + not isBarrier(instr, vn) ) - } + ) +} + +/** + * Holds if `instr` is part of a path from a call to a `scanf`-like function + * that writes to a variable with value number `vn`, without passing through + * redefinitions of the variable. + * + * Note: This predicate only holds for the `(intr, vn)` pairs that are also + * control-flow reachable from an argument to a `scanf`-like function call. + */ +pragma[nomagic] +predicate revFlow(Instruction instr, ValueNumber vn) { + fwdFlow(instr, vn) and + ( + isSink(instr, _, vn) + or + exists(Instruction succ | revFlow(succ, vn) | + instr.getASuccessor() = succ and + not isBarrier(succ, vn) + ) + ) +} + +/** + * A type that bundles together a reachable instruction with the appropriate + * value number (i.e., the value number that's transferred from the source + * to the sink). + */ +newtype TNode = MkNode(Instruction instr, ValueNumber vn) { revFlow(instr, vn) } + +class Node extends MkNode { + ValueNumber vn; + Instruction instr; + + Node() { this = MkNode(instr, vn) } + + final string toString() { result = instr.toString() } + + final Node getASuccessor() { result = MkNode(instr.getASuccessor(), vn) } + + final Location getLocation() { result = instr.getLocation() } +} + +/** + * Holds if `instr` is an instruction with value number `vn` that is + * used in a store operation, or is overwritten by another call to + * a `scanf`-like function. + */ +private predicate isBarrier(Instruction instr, ValueNumber vn) { + // We only need to compute barriers for instructions that we + // managed to hit during the initial flow stage. + revFlow0(pragma[only_bind_into](instr)) and + valueNumber(instr) = vn and + exists(Expr e | instr.getAst() = e | + instr = any(StoreInstruction s).getDestinationAddress() + or + isSource(_, _, _, _, [e, e.getParent().(AddressOfExpr)]) + ) +} + +/** Holds if `n1` steps to `n2` in a single step. */ +predicate isSuccessor(Node n1, Node n2) { n1.getASuccessor() = n2 } + +predicate hasFlow(Node n1, Node n2) = fastTC(isSuccessor/2)(n1, n2) + +Node getNode(Instruction instr, ValueNumber vn) { result = MkNode(instr, vn) } + +/** + * Holds if `source` is the `index`'th argument to the `scanf`-like call `call`, and `sink` is + * an instruction that is part of the translation of `access` which is a transitive + * control-flow successor of `call`. + * + * Furthermore, `source` and `sink` have identical global value numbers. + */ +predicate hasFlow( + Instruction source, ScanfFunctionCall call, int index, Instruction sink, Access access +) { + exists(ValueNumber vn | + isSource(call, index, source, vn, _) and + hasFlow(getNode(source, vn), getNode(sink, vn)) and + isSink(sink, access, vn) + ) +} + +/** + * Gets the smallest possible `scanf` return value of `call` that would indicate + * success in writing the output argument at index `index`. + */ +int getMinimumGuardConstant(ScanfFunctionCall call, int index) { + isSource(call, index, _, _, _) and + result = + index + 1 - + count(ScanfFormatLiteral f, int n | + // Special case: %n writes to an argument without reading any input. + // It does not increase the count returned by `scanf`. + n <= index and f.getUse() = call and f.getConversionChar(n) = "n" + ) +} + +/** + * Holds the access to `e` isn't guarded by a check that ensures that `call` returned + * at least `minGuard`. + */ +predicate hasNonGuardedAccess(ScanfFunctionCall call, Access e, int minGuard) { + exists(int index | + hasFlow(_, call, index, _, e) and + minGuard = getMinimumGuardConstant(call, index) + | + not exists(int value | + e.getBasicBlock() = blockGuardedBy(value, "==", call) and minGuard <= value + or + e.getBasicBlock() = blockGuardedBy(value, "<", call) and minGuard - 1 <= value + or + e.getBasicBlock() = blockGuardedBy(value, "<=", call) and minGuard <= value + ) + ) } /** Returns a block guarded by the assertion of `value op call` */ @@ -112,12 +221,9 @@ BasicBlock blockGuardedBy(int value, string op, ScanfFunctionCall call) { ) } -from ScanfOutput output, ScanfFunctionCall call, Access access -where - output.getCall() = call and - output.hasGuardedAccess(access, false) and - not exists(DeallocationExpr dealloc | dealloc.getFreedExpr() = access) +from ScanfFunctionCall call, Access access, int minGuard +where hasNonGuardedAccess(call, access, minGuard) select access, "This variable is read, but may not have been written. " + - "It should be guarded by a check that the $@ returns at least " + - output.getMinimumGuardConstant() + ".", call, call.toString() + "It should be guarded by a check that the $@ returns at least " + minGuard + ".", call, + call.toString() diff --git a/cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql b/cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql index 06c4ee5efe5..1c163eade27 100644 --- a/cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql +++ b/cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql @@ -15,76 +15,24 @@ import semmle.code.cpp.ir.dataflow.internal.DefaultTaintTrackingImpl import TaintedWithPath +string getATopLevelDomain() { + result = + [ + "com", "ru", "net", "org", "de", "jp", "uk", "br", "pl", "in", "it", "fr", "au", "info", "nl", + "cn", "ir", "es", "cz", "biz", "ca", "eu", "ua", "kr", "za", "co", "gr", "ro", "se", "tw", + "vn", "mx", "ch", "tr", "at", "be", "hu", "tv", "dk", "me", "ar", "us", "no", "sk", "fi", + "id", "cl", "nz", "by", "xyz", "pt", "ie", "il", "kz", "my", "hk", "lt", "cc", "sg", "io", + "edu", "gov" + ] +} + predicate hardCodedAddressOrIP(StringLiteral txt) { exists(string s | s = txt.getValueText() | // Hard-coded ip addresses, such as 127.0.0.1 s.regexpMatch("\"[0-9]+[.][0-9]+[.][0-9]+[.][0-9]+\"") or // Hard-coded addresses such as www.mycompany.com - s.matches("\"www.%\"") or - s.matches("\"http:%\"") or - s.matches("\"https:%\"") or - s.matches("\"%.com\"") or - s.matches("\"%.ru\"") or - s.matches("\"%.net\"") or - s.matches("\"%.org\"") or - s.matches("\"%.de\"") or - s.matches("\"%.jp\"") or - s.matches("\"%.uk\"") or - s.matches("\"%.br\"") or - s.matches("\"%.pl\"") or - s.matches("\"%.in\"") or - s.matches("\"%.it\"") or - s.matches("\"%.fr\"") or - s.matches("\"%.au\"") or - s.matches("\"%.info\"") or - s.matches("\"%.nl\"") or - s.matches("\"%.cn\"") or - s.matches("\"%.ir\"") or - s.matches("\"%.es\"") or - s.matches("\"%.cz\"") or - s.matches("\"%.biz\"") or - s.matches("\"%.ca\"") or - s.matches("\"%.eu\"") or - s.matches("\"%.ua\"") or - s.matches("\"%.kr\"") or - s.matches("\"%.za\"") or - s.matches("\"%.co\"") or - s.matches("\"%.gr\"") or - s.matches("\"%.ro\"") or - s.matches("\"%.se\"") or - s.matches("\"%.tw\"") or - s.matches("\"%.vn\"") or - s.matches("\"%.mx\"") or - s.matches("\"%.ch\"") or - s.matches("\"%.tr\"") or - s.matches("\"%.at\"") or - s.matches("\"%.be\"") or - s.matches("\"%.hu\"") or - s.matches("\"%.tv\"") or - s.matches("\"%.dk\"") or - s.matches("\"%.me\"") or - s.matches("\"%.ar\"") or - s.matches("\"%.us\"") or - s.matches("\"%.no\"") or - s.matches("\"%.sk\"") or - s.matches("\"%.fi\"") or - s.matches("\"%.id\"") or - s.matches("\"%.cl\"") or - s.matches("\"%.nz\"") or - s.matches("\"%.by\"") or - s.matches("\"%.xyz\"") or - s.matches("\"%.pt\"") or - s.matches("\"%.ie\"") or - s.matches("\"%.il\"") or - s.matches("\"%.kz\"") or - s.matches("\"%.my\"") or - s.matches("\"%.hk\"") or - s.matches("\"%.lt\"") or - s.matches("\"%.cc\"") or - s.matches("\"%.sg\"") or - s.matches("\"%.io\"") or - s.matches("\"%.edu\"") or - s.matches("\"%.gov\"") + s.regexpMatch("\"(www\\.|http:|https:).*\"") or + s.regexpMatch("\".*\\.(" + strictconcat(getATopLevelDomain(), "|") + ")\"") ) } diff --git a/cpp/ql/src/change-notes/2023-01-05-heuristic-allocations.md b/cpp/ql/src/change-notes/released/0.5.1.md similarity index 80% rename from cpp/ql/src/change-notes/2023-01-05-heuristic-allocations.md rename to cpp/ql/src/change-notes/released/0.5.1.md index 2f1f762b4d0..dea0cd21aa5 100644 --- a/cpp/ql/src/change-notes/2023-01-05-heuristic-allocations.md +++ b/cpp/ql/src/change-notes/released/0.5.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 0.5.1 + +### Minor Analysis Improvements + * The `cpp/no-space-for-terminator` and `cpp/uncontrolled-allocation-size` queries have been enhanced with heuristic detection of allocations. These queries now find more results. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 30e271c5361..0bf7024c337 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.5.1 diff --git a/cpp/ql/src/codeql-suites/cpp-security-experimental.qls b/cpp/ql/src/codeql-suites/cpp-security-experimental.qls new file mode 100644 index 00000000000..ec9699b1ad1 --- /dev/null +++ b/cpp/ql/src/codeql-suites/cpp-security-experimental.qls @@ -0,0 +1,9 @@ +- description: Extended and experimental security queries for C and C++ +- queries: . +- apply: security-experimental-selectors.yml + from: codeql/suite-helpers +- apply: codeql-suites/exclude-slow-queries.yml +# Excluding problematically slow experimental queries +- exclude: + query path: + - experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql \ No newline at end of file diff --git a/cpp/ql/src/experimental/Likely Bugs/ArrayAccessProductFlow.ql b/cpp/ql/src/experimental/Likely Bugs/ArrayAccessProductFlow.ql index b9b0383fd6b..61c0af6be26 100644 --- a/cpp/ql/src/experimental/Likely Bugs/ArrayAccessProductFlow.ql +++ b/cpp/ql/src/experimental/Likely Bugs/ArrayAccessProductFlow.ql @@ -6,6 +6,7 @@ * @id cpp/off-by-one-array-access * @tags reliability * security + * experimental */ import cpp diff --git a/cpp/ql/src/experimental/Likely Bugs/OverrunWriteProductFlow.ql b/cpp/ql/src/experimental/Likely Bugs/OverrunWriteProductFlow.ql index 0f727c5e54d..5e0d1d7b5bb 100644 --- a/cpp/ql/src/experimental/Likely Bugs/OverrunWriteProductFlow.ql +++ b/cpp/ql/src/experimental/Likely Bugs/OverrunWriteProductFlow.ql @@ -7,6 +7,7 @@ * @id cpp/overrun-write * @tags reliability * security + * experimental * external/cwe/cwe-119 * external/cwe/cwe-131 */ diff --git a/cpp/ql/src/experimental/Likely Bugs/RedundantNullCheckParam.ql b/cpp/ql/src/experimental/Likely Bugs/RedundantNullCheckParam.ql index 2ee4559cdae..36e42cae92a 100644 --- a/cpp/ql/src/experimental/Likely Bugs/RedundantNullCheckParam.ql +++ b/cpp/ql/src/experimental/Likely Bugs/RedundantNullCheckParam.ql @@ -9,6 +9,7 @@ * @tags reliability * security * external/cwe/cwe-476 + * experimental */ import cpp diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql b/cpp/ql/src/experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql index 0d426492cdf..07d18992db6 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql @@ -9,6 +9,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-20 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-020/NoCheckBeforeUnsafePutUser.ql b/cpp/ql/src/experimental/Security/CWE/CWE-020/NoCheckBeforeUnsafePutUser.ql index f01a7cb1ed0..8a93e93476e 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-020/NoCheckBeforeUnsafePutUser.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-020/NoCheckBeforeUnsafePutUser.ql @@ -11,6 +11,7 @@ * @problem.severity warning * @security-severity 7.5 * @tags security + * experimental * external/cwe/cwe-020 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-078/WordexpTainted.ql b/cpp/ql/src/experimental/Security/CWE/CWE-078/WordexpTainted.ql index 40b61ff60f6..f4de1251e8b 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-078/WordexpTainted.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-078/WordexpTainted.ql @@ -8,6 +8,7 @@ * @precision high * @id cpp/wordexp-injection * @tags security + * experimental * external/cwe/cwe-078 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-1041/FindWrapperFunctions.ql b/cpp/ql/src/experimental/Security/CWE/CWE-1041/FindWrapperFunctions.ql index 700993b58ed..cc25326f0b4 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-1041/FindWrapperFunctions.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-1041/FindWrapperFunctions.ql @@ -8,6 +8,7 @@ * @tags correctness * maintainability * security + * experimental * external/cwe/cwe-1041 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-1126/DeclarationOfVariableWithUnnecessarilyWideScope.ql b/cpp/ql/src/experimental/Security/CWE/CWE-1126/DeclarationOfVariableWithUnnecessarilyWideScope.ql index e73f36145c6..136931f00ec 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-1126/DeclarationOfVariableWithUnnecessarilyWideScope.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-1126/DeclarationOfVariableWithUnnecessarilyWideScope.ql @@ -9,6 +9,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-1126 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-120/MemoryUnsafeFunctionScan.ql b/cpp/ql/src/experimental/Security/CWE/CWE-120/MemoryUnsafeFunctionScan.ql index dd98d1b6053..c74918dbb88 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-120/MemoryUnsafeFunctionScan.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-120/MemoryUnsafeFunctionScan.ql @@ -6,6 +6,7 @@ * @id cpp/memory-unsafe-function-scan * @tags reliability * security + * experimental * external/cwe/cwe-120 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-125/DangerousWorksWithMultibyteOrWideCharacters.ql b/cpp/ql/src/experimental/Security/CWE/CWE-125/DangerousWorksWithMultibyteOrWideCharacters.ql index 0b7555c9e41..12a44be0d1f 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-125/DangerousWorksWithMultibyteOrWideCharacters.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-125/DangerousWorksWithMultibyteOrWideCharacters.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-125 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-190/AllocMultiplicationOverflow.ql b/cpp/ql/src/experimental/Security/CWE/CWE-190/AllocMultiplicationOverflow.ql index f59f32f592e..7de48c0d1e1 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-190/AllocMultiplicationOverflow.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-190/AllocMultiplicationOverflow.ql @@ -6,6 +6,7 @@ * @precision low * @tags security * correctness + * experimental * external/cwe/cwe-190 * external/cwe/cwe-128 * @id cpp/multiplication-overflow-in-alloc diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation.ql b/cpp/ql/src/experimental/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation.ql index 026c279de7c..e848b97ef8f 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-190 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-193/ConstantSizeArrayOffByOne.ql b/cpp/ql/src/experimental/Security/CWE/CWE-193/ConstantSizeArrayOffByOne.ql index 990c4356425..b7c2810541f 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-193/ConstantSizeArrayOffByOne.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-193/ConstantSizeArrayOffByOne.ql @@ -7,6 +7,7 @@ * @id cpp/constant-array-overflow * @tags reliability * security + * experimental */ import experimental.semmle.code.cpp.semantic.analysis.RangeAnalysis diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-193/InvalidPointerDeref.ql b/cpp/ql/src/experimental/Security/CWE/CWE-193/InvalidPointerDeref.ql index d2593dd05a0..8ecd855a3bc 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-193/InvalidPointerDeref.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-193/InvalidPointerDeref.ql @@ -8,6 +8,7 @@ * @id cpp/invalid-pointer-deref * @tags reliability * security + * experimental * external/cwe/cwe-119 * external/cwe/cwe-125 * external/cwe/cwe-193 diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql b/cpp/ql/src/experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql index ec32ccd4bfc..61708ce5da0 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql @@ -8,6 +8,7 @@ * @tags correctness * maintainability * security + * experimental * external/cwe/cwe-200 * external/cwe/cwe-264 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-243/IncorrectChangingWorkingDirectory.ql b/cpp/ql/src/experimental/Security/CWE/CWE-243/IncorrectChangingWorkingDirectory.ql index 02d57ee3c3f..ce5f4dd00f8 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-243/IncorrectChangingWorkingDirectory.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-243/IncorrectChangingWorkingDirectory.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-243 * external/cwe/cwe-252 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql b/cpp/ql/src/experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql index 5bdd5a21fe5..a8f93155599 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql @@ -8,6 +8,7 @@ * @tags correctness * maintainability * security + * experimental * external/cwe/cwe-266 * external/cwe/cwe-264 * external/cwe/cwe-200 diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-273/PrivilegeDroppingOutoforder.ql b/cpp/ql/src/experimental/Security/CWE/CWE-273/PrivilegeDroppingOutoforder.ql index 0491d711833..67464d4b37a 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-273/PrivilegeDroppingOutoforder.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-273/PrivilegeDroppingOutoforder.ql @@ -8,6 +8,7 @@ * @problem.severity recommendation * @id cpp/drop-linux-privileges-outoforder * @tags security + * experimental * external/cwe/cwe-273 * @precision medium */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-285/PamAuthorization.ql b/cpp/ql/src/experimental/Security/CWE/CWE-285/PamAuthorization.ql index 5292a705d93..59c4a68c92a 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-285/PamAuthorization.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-285/PamAuthorization.ql @@ -5,6 +5,7 @@ * @problem.severity error * @id cpp/pam-auth-bypass * @tags security + * experimental * external/cwe/cwe-285 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-359/PrivateCleartextWrite.ql b/cpp/ql/src/experimental/Security/CWE/CWE-359/PrivateCleartextWrite.ql index 133b38372a6..273e3b7855a 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-359/PrivateCleartextWrite.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-359/PrivateCleartextWrite.ql @@ -6,6 +6,7 @@ * @problem.severity error * @id cpp/private-cleartext-write * @tags security + * experimental * external/cwe/cwe-359 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-362/double-fetch.ql b/cpp/ql/src/experimental/Security/CWE/CWE-362/double-fetch.ql index 39ab8c1ead4..4f641ba3406 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-362/double-fetch.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-362/double-fetch.ql @@ -11,6 +11,7 @@ * @problem.severity warning * @security-severity 7.5 * @tags security + * experimental * external/cwe/cwe-362 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-377/InsecureTemporaryFile.ql b/cpp/ql/src/experimental/Security/CWE/CWE-377/InsecureTemporaryFile.ql index 0852cb90918..f62222eb5b9 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-377/InsecureTemporaryFile.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-377/InsecureTemporaryFile.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-377 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql b/cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql index ce991a42a68..3132b103bbc 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql @@ -8,6 +8,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-401 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-415/DoubleFree.ql b/cpp/ql/src/experimental/Security/CWE/CWE-415/DoubleFree.ql index 0544c2aefd5..a6b70d9c506 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-415/DoubleFree.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-415/DoubleFree.ql @@ -6,6 +6,7 @@ * @problem.severity warning * @precision medium * @tags security + * experimental * external/cwe/cwe-415 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-476/DangerousUseOfExceptionBlocks.ql b/cpp/ql/src/experimental/Security/CWE/CWE-476/DangerousUseOfExceptionBlocks.ql index 2feca267902..4eb24c14322 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-476/DangerousUseOfExceptionBlocks.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-476/DangerousUseOfExceptionBlocks.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-476 * external/cwe/cwe-415 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-561/FindIncorrectlyUsedSwitch.ql b/cpp/ql/src/experimental/Security/CWE/CWE-561/FindIncorrectlyUsedSwitch.ql index 2de9cf5fc78..a643c3e3bf0 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-561/FindIncorrectlyUsedSwitch.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-561/FindIncorrectlyUsedSwitch.ql @@ -8,6 +8,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-561 * external/cwe/cwe-691 * external/cwe/cwe-478 diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-670/DangerousUseSSL_shutdown.ql b/cpp/ql/src/experimental/Security/CWE/CWE-670/DangerousUseSSL_shutdown.ql index 187b30a73b9..a5270518894 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-670/DangerousUseSSL_shutdown.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-670/DangerousUseSSL_shutdown.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-670 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-675/DoubleRelease.ql b/cpp/ql/src/experimental/Security/CWE/CWE-675/DoubleRelease.ql index 7a884769bf8..a933ed063b2 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-675/DoubleRelease.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-675/DoubleRelease.ql @@ -6,6 +6,7 @@ * @problem.severity warning * @precision medium * @tags security + * experimental * external/cwe/cwe-675 * external/cwe/cwe-666 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementAfterRefactoringTheCode.ql b/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementAfterRefactoringTheCode.ql index 72c622baf76..e0b248c2066 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementAfterRefactoringTheCode.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementAfterRefactoringTheCode.ql @@ -10,6 +10,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-691 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementWhenUsingBitOperations.ql b/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementWhenUsingBitOperations.ql index 72d7625b517..2772fbabd22 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementWhenUsingBitOperations.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementWhenUsingBitOperations.ql @@ -8,6 +8,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-691 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-703/FindIncorrectlyUsedExceptions.ql b/cpp/ql/src/experimental/Security/CWE/CWE-703/FindIncorrectlyUsedExceptions.ql index 97c1e410066..5ee747db880 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-703/FindIncorrectlyUsedExceptions.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-703/FindIncorrectlyUsedExceptions.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-703 * external/cwe/cwe-248 * external/cwe/cwe-390 diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-754/ImproperCheckReturnValueScanf.ql b/cpp/ql/src/experimental/Security/CWE/CWE-754/ImproperCheckReturnValueScanf.ql index d19f72cf2c7..46d5d618e07 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-754/ImproperCheckReturnValueScanf.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-754/ImproperCheckReturnValueScanf.ql @@ -7,6 +7,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-754 * external/cwe/cwe-908 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-758/UndefinedOrImplementationDefinedBehavior.ql b/cpp/ql/src/experimental/Security/CWE/CWE-758/UndefinedOrImplementationDefinedBehavior.ql index bafe3d13b84..7303aaf9644 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-758/UndefinedOrImplementationDefinedBehavior.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-758/UndefinedOrImplementationDefinedBehavior.ql @@ -8,6 +8,7 @@ * @problem.severity warning * @precision medium * @tags security + * experimental * external/cwe/cwe-758 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql b/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql index 54a4490dc51..8bb1d0ba97b 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql @@ -8,6 +8,7 @@ * @precision medium * @tags maintainability * readability + * experimental * external/cwe/cwe-783 * external/cwe/cwe-480 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBoolType.ql b/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBoolType.ql index dd71703b530..d56e09a5284 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBoolType.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBoolType.ql @@ -8,6 +8,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-783 * external/cwe/cwe-480 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-787/UnsignedToSignedPointerArith.ql b/cpp/ql/src/experimental/Security/CWE/CWE-787/UnsignedToSignedPointerArith.ql index 571d2f26e33..8cc1a1ec497 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-787/UnsignedToSignedPointerArith.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-787/UnsignedToSignedPointerArith.ql @@ -6,6 +6,7 @@ * @problem.severity warning * @tags reliability * security + * experimental * external/cwe/cwe-787 */ diff --git a/cpp/ql/src/experimental/Security/CWE/CWE-788/AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql b/cpp/ql/src/experimental/Security/CWE/CWE-788/AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql index 3d1e0637fe6..083d7b1a669 100644 --- a/cpp/ql/src/experimental/Security/CWE/CWE-788/AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql +++ b/cpp/ql/src/experimental/Security/CWE/CWE-788/AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql @@ -8,6 +8,7 @@ * @precision medium * @tags correctness * security + * experimental * external/cwe/cwe-788 */ diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index 816749f86ba..428658275b8 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 0.5.1-dev +version: 0.5.2-dev groups: - cpp - queries diff --git a/cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-consistency.expected b/cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-consistency.expected index 67396c64e65..8873d4c11e6 100644 --- a/cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-consistency.expected +++ b/cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-consistency.expected @@ -99,6 +99,9 @@ postWithInFlow | test.cpp:526:3:526:4 | * ... [post update] | PostUpdateNode should not be the target of local flow. | | test.cpp:526:4:526:4 | e [inner post update] | PostUpdateNode should not be the target of local flow. | | test.cpp:531:40:531:40 | e [inner post update] | PostUpdateNode should not be the target of local flow. | +| test.cpp:537:5:537:6 | * ... [post update] | PostUpdateNode should not be the target of local flow. | +| test.cpp:537:6:537:6 | p [inner post update] | PostUpdateNode should not be the target of local flow. | +| test.cpp:542:23:542:23 | x [inner post update] | PostUpdateNode should not be the target of local flow. | viableImplInCallContextTooLarge uniqueParameterNodeAtPosition uniqueParameterNodePosition diff --git a/cpp/ql/test/library-tests/dataflow/dataflow-tests/test.cpp b/cpp/ql/test/library-tests/dataflow/dataflow-tests/test.cpp index 14aefdce2d3..8993926bf0f 100644 --- a/cpp/ql/test/library-tests/dataflow/dataflow-tests/test.cpp +++ b/cpp/ql/test/library-tests/dataflow/dataflow-tests/test.cpp @@ -530,4 +530,14 @@ void test_set_through_const_pointer(int *e) { set_through_const_pointer(source(), &e); sink(*e); // $ ir MISSING: ast -} \ No newline at end of file +} + +void sink_then_source(int* p) { + sink(*p); + *p = source(); // $ SPURIOUS: ir=537:10 ir=541:9 +} + +void test_sink_then_source() { + int x; + sink_then_source(&x); +} diff --git a/cpp/ql/test/library-tests/dataflow/dataflow-tests/uninitialized.expected b/cpp/ql/test/library-tests/dataflow/dataflow-tests/uninitialized.expected index 459d4f6ea00..d05e8c4bed5 100644 --- a/cpp/ql/test/library-tests/dataflow/dataflow-tests/uninitialized.expected +++ b/cpp/ql/test/library-tests/dataflow/dataflow-tests/uninitialized.expected @@ -37,3 +37,4 @@ | test.cpp:517:7:517:16 | stackArray | test.cpp:519:3:519:12 | stackArray | | test.cpp:517:7:517:16 | stackArray | test.cpp:520:3:520:12 | stackArray | | test.cpp:517:7:517:16 | stackArray | test.cpp:521:8:521:17 | stackArray | +| test.cpp:541:9:541:9 | x | test.cpp:542:23:542:23 | x | diff --git a/cpp/ql/test/library-tests/ir/ir/PrintAST.expected b/cpp/ql/test/library-tests/ir/ir/PrintAST.expected index c86e4dc5b8f..1a62935e32c 100644 --- a/cpp/ql/test/library-tests/ir/ir/PrintAST.expected +++ b/cpp/ql/test/library-tests/ir/ir/PrintAST.expected @@ -207,34 +207,35 @@ bad_asts.cpp: # 27| Type = [SpecifiedType] const Point # 27| ValueCategory = lvalue # 28| getStmt(1): [ReturnStmt] return ... -# 30| [TopLevelFunction] void Bad::errorExpr() -# 30| : -# 30| getEntryPoint(): [BlockStmt] { ... } -# 31| getStmt(0): [DeclStmt] declaration -# 31| getDeclarationEntry(0): [VariableDeclarationEntry] definition of intref -# 31| Type = [LValueReferenceType] int & -# 31| getVariable().getInitializer(): [Initializer] initializer for intref -# 31| getExpr(): [ErrorExpr] -# 31| Type = [ErroneousType] error -# 31| ValueCategory = prvalue -# 32| getStmt(1): [DeclStmt] declaration -# 32| getDeclarationEntry(0): [VariableDeclarationEntry] definition of x -# 32| Type = [IntType] int -# 32| getVariable().getInitializer(): [Initializer] initializer for x -# 32| getExpr(): [ErrorExpr] -# 32| Type = [ErroneousType] error -# 32| ValueCategory = prvalue -# 33| getStmt(2): [ExprStmt] ExprStmt -# 33| getExpr(): [AssignExpr] ... = ... -# 33| Type = [IntType] int -# 33| ValueCategory = lvalue -# 33| getLValue(): [VariableAccess] x -# 33| Type = [IntType] int -# 33| ValueCategory = lvalue -# 33| getRValue(): [ErrorExpr] -# 33| Type = [ErroneousType] error -# 33| ValueCategory = prvalue(load) -# 34| getStmt(3): [ReturnStmt] return ... +bad_stmts.cpp: +# 5| [TopLevelFunction] void Bad::errorExpr() +# 5| : +# 5| getEntryPoint(): [BlockStmt] { ... } +# 6| getStmt(0): [DeclStmt] declaration +# 6| getDeclarationEntry(0): [VariableDeclarationEntry] definition of intref +# 6| Type = [LValueReferenceType] int & +# 6| getVariable().getInitializer(): [Initializer] initializer for intref +# 6| getExpr(): [ErrorExpr] +# 6| Type = [ErroneousType] error +# 6| ValueCategory = prvalue +# 7| getStmt(1): [DeclStmt] declaration +# 7| getDeclarationEntry(0): [VariableDeclarationEntry] definition of x +# 7| Type = [IntType] int +# 7| getVariable().getInitializer(): [Initializer] initializer for x +# 7| getExpr(): [ErrorExpr] +# 7| Type = [ErroneousType] error +# 7| ValueCategory = prvalue +# 8| getStmt(2): [ExprStmt] ExprStmt +# 8| getExpr(): [AssignExpr] ... = ... +# 8| Type = [IntType] int +# 8| ValueCategory = lvalue +# 8| getLValue(): [VariableAccess] x +# 8| Type = [IntType] int +# 8| ValueCategory = lvalue +# 8| getRValue(): [ErrorExpr] +# 8| Type = [ErroneousType] error +# 8| ValueCategory = prvalue(load) +# 9| getStmt(3): [ReturnStmt] return ... clang.cpp: # 5| [TopLevelFunction] int* globalIntAddress() # 5| : diff --git a/cpp/ql/test/library-tests/ir/ir/bad_asts.cpp b/cpp/ql/test/library-tests/ir/ir/bad_asts.cpp index dbb63b2c91a..6bd726959c7 100644 --- a/cpp/ql/test/library-tests/ir/ir/bad_asts.cpp +++ b/cpp/ql/test/library-tests/ir/ir/bad_asts.cpp @@ -1,4 +1,4 @@ -// semmle-extractor-options: -std=c++17 --expect_errors +// semmle-extractor-options: -std=c++17 // Test cases that illustrate known bad ASTs that we have to work around in IR generation. namespace Bad { @@ -26,10 +26,4 @@ namespace Bad { void CallCopyConstructor(const Point& a) { Point b = a; // Copy constructor contains literal expressions with no values. } - - void errorExpr() { - int &intref = 0; - int x = 0[0]; - x = 1[1]; - } } diff --git a/cpp/ql/test/library-tests/ir/ir/bad_stmts.cpp b/cpp/ql/test/library-tests/ir/ir/bad_stmts.cpp new file mode 100644 index 00000000000..e44f659cdf6 --- /dev/null +++ b/cpp/ql/test/library-tests/ir/ir/bad_stmts.cpp @@ -0,0 +1,10 @@ +// semmle-extractor-options: -std=c++17 --expect_errors + +// Test cases that illustrate known bad ASTs that we have to work around in IR generation. +namespace Bad { + void errorExpr() { + int &intref = 0; + int x = 0[0]; + x = 1[1]; + } +} diff --git a/cpp/ql/test/library-tests/ir/ir/operand_locations.expected b/cpp/ql/test/library-tests/ir/ir/operand_locations.expected index 8882fae255a..a221025eb88 100644 --- a/cpp/ql/test/library-tests/ir/ir/operand_locations.expected +++ b/cpp/ql/test/library-tests/ir/ir/operand_locations.expected @@ -98,17 +98,17 @@ | bad_asts.cpp:27:15:27:15 | StoreValue | r27_6 | | bad_asts.cpp:27:15:27:15 | Unary | r27_3 | | bad_asts.cpp:27:15:27:15 | Unary | r27_4 | -| bad_asts.cpp:30:8:30:16 | ChiPartial | partial:m30_3 | -| bad_asts.cpp:30:8:30:16 | ChiTotal | total:m30_2 | -| bad_asts.cpp:30:8:30:16 | SideEffect | m30_3 | -| bad_asts.cpp:31:10:31:15 | Address | &:r31_1 | -| bad_asts.cpp:31:18:31:19 | StoreValue | r31_2 | -| bad_asts.cpp:32:9:32:9 | Address | &:r32_1 | -| bad_asts.cpp:32:12:32:16 | StoreValue | r32_2 | -| bad_asts.cpp:33:5:33:5 | Address | &:r33_3 | -| bad_asts.cpp:33:5:33:12 | Address | &:r33_1 | -| bad_asts.cpp:33:5:33:12 | Load | ~m30_4 | -| bad_asts.cpp:33:5:33:12 | StoreValue | r33_2 | +| bad_stmts.cpp:5:8:5:16 | ChiPartial | partial:m5_3 | +| bad_stmts.cpp:5:8:5:16 | ChiTotal | total:m5_2 | +| bad_stmts.cpp:5:8:5:16 | SideEffect | m5_3 | +| bad_stmts.cpp:6:10:6:15 | Address | &:r6_1 | +| bad_stmts.cpp:6:18:6:19 | StoreValue | r6_2 | +| bad_stmts.cpp:7:9:7:9 | Address | &:r7_1 | +| bad_stmts.cpp:7:12:7:16 | StoreValue | r7_2 | +| bad_stmts.cpp:8:5:8:5 | Address | &:r8_3 | +| bad_stmts.cpp:8:5:8:12 | Address | &:r8_1 | +| bad_stmts.cpp:8:5:8:12 | Load | ~m5_4 | +| bad_stmts.cpp:8:5:8:12 | StoreValue | r8_2 | | clang.cpp:5:6:5:21 | Address | &:r5_5 | | clang.cpp:5:6:5:21 | ChiPartial | partial:m5_3 | | clang.cpp:5:6:5:21 | ChiTotal | total:m5_2 | diff --git a/cpp/ql/test/library-tests/ir/ir/raw_ir.expected b/cpp/ql/test/library-tests/ir/ir/raw_ir.expected index 6f9186e3b8d..c3293466b9a 100644 --- a/cpp/ql/test/library-tests/ir/ir/raw_ir.expected +++ b/cpp/ql/test/library-tests/ir/ir/raw_ir.expected @@ -120,25 +120,26 @@ bad_asts.cpp: # 26| v26_10(void) = AliasedUse : ~m? # 26| v26_11(void) = ExitFunction : -# 30| void Bad::errorExpr() -# 30| Block 0 -# 30| v30_1(void) = EnterFunction : -# 30| mu30_2(unknown) = AliasedDefinition : -# 30| mu30_3(unknown) = InitializeNonLocal : -# 31| r31_1(glval) = VariableAddress[intref] : -# 31| r31_2(error) = Error : -# 31| mu31_3(int &) = Store[intref] : &:r31_1, r31_2 -# 32| r32_1(glval) = VariableAddress[x] : -# 32| r32_2(error) = Error : -# 32| mu32_3(int) = Store[x] : &:r32_1, r32_2 -# 33| r33_1(glval) = Error : -# 33| r33_2(error) = Load[?] : &:r33_1, ~m? -# 33| r33_3(glval) = VariableAddress[x] : -# 33| mu33_4(int) = Store[x] : &:r33_3, r33_2 -# 34| v34_1(void) = NoOp : -# 30| v30_4(void) = ReturnVoid : -# 30| v30_5(void) = AliasedUse : ~m? -# 30| v30_6(void) = ExitFunction : +bad_stmts.cpp: +# 5| void Bad::errorExpr() +# 5| Block 0 +# 5| v5_1(void) = EnterFunction : +# 5| mu5_2(unknown) = AliasedDefinition : +# 5| mu5_3(unknown) = InitializeNonLocal : +# 6| r6_1(glval) = VariableAddress[intref] : +# 6| r6_2(error) = Error : +# 6| mu6_3(int &) = Store[intref] : &:r6_1, r6_2 +# 7| r7_1(glval) = VariableAddress[x] : +# 7| r7_2(error) = Error : +# 7| mu7_3(int) = Store[x] : &:r7_1, r7_2 +# 8| r8_1(glval) = Error : +# 8| r8_2(error) = Load[?] : &:r8_1, ~m? +# 8| r8_3(glval) = VariableAddress[x] : +# 8| mu8_4(int) = Store[x] : &:r8_3, r8_2 +# 9| v9_1(void) = NoOp : +# 5| v5_4(void) = ReturnVoid : +# 5| v5_5(void) = AliasedUse : ~m? +# 5| v5_6(void) = ExitFunction : clang.cpp: # 5| int* globalIntAddress() diff --git a/cpp/ql/test/library-tests/ir/modulus-analysis/ModulusAnalysis.ql b/cpp/ql/test/library-tests/ir/modulus-analysis/ModulusAnalysis.ql index 794dbed9628..bb335a0b30f 100644 --- a/cpp/ql/test/library-tests/ir/modulus-analysis/ModulusAnalysis.ql +++ b/cpp/ql/test/library-tests/ir/modulus-analysis/ModulusAnalysis.ql @@ -1,9 +1,16 @@ import cpp import experimental.semmle.code.cpp.semantic.analysis.ModulusAnalysis import experimental.semmle.code.cpp.semantic.Semantic +import experimental.semmle.code.cpp.semantic.analysis.RangeUtils +import experimental.semmle.code.cpp.semantic.analysis.FloatDelta +import experimental.semmle.code.cpp.semantic.analysis.RangeAnalysisSpecific +import experimental.semmle.code.cpp.semantic.analysis.RangeAnalysis import semmle.code.cpp.ir.IR as IR import TestUtilities.InlineExpectationsTest +module ModulusAnalysisInstantiated = + ModulusAnalysis>; + class ModulusAnalysisTest extends InlineExpectationsTest { ModulusAnalysisTest() { this = "ModulusAnalysisTest" } @@ -23,7 +30,7 @@ class ModulusAnalysisTest extends InlineExpectationsTest { private string getAModString(SemExpr e) { exists(SemBound b, int delta, int mod | - semExprModulus(e, b, delta, mod) and + ModulusAnalysisInstantiated::semExprModulus(e, b, delta, mod) and result = b.toString() + "," + delta.toString() + "," + mod.toString() and not (delta = 0 and mod = 0) ) diff --git a/cpp/ql/test/library-tests/ir/sign-analysis/SignAnalysis.ql b/cpp/ql/test/library-tests/ir/sign-analysis/SignAnalysis.ql index c41ed2cb200..d4f499fdc61 100644 --- a/cpp/ql/test/library-tests/ir/sign-analysis/SignAnalysis.ql +++ b/cpp/ql/test/library-tests/ir/sign-analysis/SignAnalysis.ql @@ -1,9 +1,14 @@ import cpp import experimental.semmle.code.cpp.semantic.analysis.SignAnalysisCommon import experimental.semmle.code.cpp.semantic.Semantic +import experimental.semmle.code.cpp.semantic.analysis.RangeUtils +import experimental.semmle.code.cpp.semantic.analysis.FloatDelta +import experimental.semmle.code.cpp.semantic.analysis.RangeAnalysisSpecific import semmle.code.cpp.ir.IR as IR import TestUtilities.InlineExpectationsTest +module SignAnalysisInstantiated = SignAnalysis>; + class SignAnalysisTest extends InlineExpectationsTest { SignAnalysisTest() { this = "SignAnalysisTest" } @@ -21,4 +26,6 @@ class SignAnalysisTest extends InlineExpectationsTest { } } -private string getASignString(SemExpr e) { result = strictconcat(semExprSign(e).toString(), "") } +private string getASignString(SemExpr e) { + result = strictconcat(SignAnalysisInstantiated::semExprSign(e).toString(), "") +} diff --git a/cpp/ql/test/library-tests/syntax-zoo/allocators.cpp b/cpp/ql/test/library-tests/syntax-zoo/allocators.cpp index f4e2133d9e0..224ea043fd4 100644 --- a/cpp/ql/test/library-tests/syntax-zoo/allocators.cpp +++ b/cpp/ql/test/library-tests/syntax-zoo/allocators.cpp @@ -1,7 +1,7 @@ -struct Foo +struct Allocators { - Foo(int x, int y) : m_x(x), m_y(y) {} - ~Foo() {m_x = m_y = 0;} + Allocators(int x, int y) : m_x(x), m_y(y) {} + ~Allocators() {m_x = m_y = 0;} // NB: In Microsoft mode, size_t is predeclared. static void* operator new(size_t sz, int z, int w) { return nullptr; } @@ -13,7 +13,7 @@ struct Foo int main() { - auto foo = new(11, 22) Foo(33, 44); + auto foo = new(11, 22) Allocators(33, 44); delete foo; } diff --git a/cpp/ql/test/library-tests/syntax-zoo/array_delete.cpp b/cpp/ql/test/library-tests/syntax-zoo/array_delete.cpp index e50131d17aa..d135dc41601 100644 --- a/cpp/ql/test/library-tests/syntax-zoo/array_delete.cpp +++ b/cpp/ql/test/library-tests/syntax-zoo/array_delete.cpp @@ -1,7 +1,7 @@ -struct Foo { - ~Foo(); +struct ArrayDelete { + ~ArrayDelete(); }; void f() { - delete[] (Foo*)nullptr; + delete[] (ArrayDelete*)nullptr; } diff --git a/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected b/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected index 5e44737a253..65bed58b2a6 100644 --- a/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected +++ b/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected @@ -74,8 +74,8 @@ argHasPostUpdate | ir.cpp:625:5:625:5 | s | ArgumentNode is missing PostUpdateNode. | postWithInFlow | VacuousDestructorCall.cpp:10:22:10:22 | i [inner post update] | PostUpdateNode should not be the target of local flow. | -| allocators.cpp:4:11:4:13 | m_x [post update] | PostUpdateNode should not be the target of local flow. | -| allocators.cpp:4:17:4:19 | m_y [post update] | PostUpdateNode should not be the target of local flow. | +| allocators.cpp:4:18:4:20 | m_x [post update] | PostUpdateNode should not be the target of local flow. | +| allocators.cpp:4:24:4:26 | m_y [post update] | PostUpdateNode should not be the target of local flow. | | assignexpr.cpp:9:4:9:4 | i [post update] | PostUpdateNode should not be the target of local flow. | | builtin.c:34:23:34:31 | staticint [inner post update] | PostUpdateNode should not be the target of local flow. | | builtin.c:39:37:39:45 | carry_out [inner post update] | PostUpdateNode should not be the target of local flow. | diff --git a/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.c b/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.c index beaad7d0fd3..e90fba6530a 100644 --- a/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.c +++ b/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.c @@ -168,4 +168,34 @@ int main(int argc, char **argv) { int i10 = (int) argv[1]; printf((char *) i10); printWrapper((char *) i10); + + // BAD: b value comes from argv + { + char b[64]; + char *bp = &b[0]; + char *t; + if (0) { + t = 0; + } else { + t = bp; + } + memcpy(t, argv[1] + 1, 1); + printf(bp); + printWrapper(bp); + } + + // BAD: b value comes from argv + { + char b[64]; + char *bp = &b[0]; + char *t; + if (1) { + t = ++bp; + } else { + t = 0; + } + memcpy(t, argv[1] + 1, 1); + printf(bp); + printWrapper(bp); + } } diff --git a/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.expected b/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.expected index cf2c0e7a23c..b636f13a6d2 100644 --- a/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.expected +++ b/cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.expected @@ -147,6 +147,30 @@ edges | argvLocal.c:168:18:168:21 | argv | argvLocal.c:170:24:170:26 | i10 | | argvLocal.c:168:18:168:21 | argv | argvLocal.c:170:24:170:26 | i10 | | argvLocal.c:168:18:168:21 | argv | argvLocal.c:170:24:170:26 | i10 | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:183:10:183:11 | (const char *)... | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:183:10:183:11 | (const char *)... | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:183:10:183:11 | bp | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:183:10:183:11 | bp | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:183:10:183:11 | bp indirection | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:183:10:183:11 | bp indirection | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:184:16:184:17 | bp | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:184:16:184:17 | bp | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:184:16:184:17 | bp | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:184:16:184:17 | bp | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:184:16:184:17 | bp indirection | +| argvLocal.c:182:13:182:16 | argv | argvLocal.c:184:16:184:17 | bp indirection | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:198:10:198:11 | (const char *)... | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:198:10:198:11 | (const char *)... | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:198:10:198:11 | bp | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:198:10:198:11 | bp | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:198:10:198:11 | bp indirection | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:198:10:198:11 | bp indirection | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:199:16:199:17 | bp | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:199:16:199:17 | bp | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:199:16:199:17 | bp | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:199:16:199:17 | bp | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:199:16:199:17 | bp indirection | +| argvLocal.c:197:13:197:16 | argv | argvLocal.c:199:16:199:17 | bp indirection | subpaths nodes | argvLocal.c:95:9:95:12 | argv | semmle.label | argv | @@ -239,6 +263,22 @@ nodes | argvLocal.c:170:15:170:26 | i10 | semmle.label | i10 | | argvLocal.c:170:24:170:26 | i10 | semmle.label | i10 | | argvLocal.c:170:24:170:26 | i10 | semmle.label | i10 | +| argvLocal.c:182:13:182:16 | argv | semmle.label | argv | +| argvLocal.c:182:13:182:16 | argv | semmle.label | argv | +| argvLocal.c:183:10:183:11 | (const char *)... | semmle.label | (const char *)... | +| argvLocal.c:183:10:183:11 | bp | semmle.label | bp | +| argvLocal.c:183:10:183:11 | bp indirection | semmle.label | bp indirection | +| argvLocal.c:184:16:184:17 | bp | semmle.label | bp | +| argvLocal.c:184:16:184:17 | bp | semmle.label | bp | +| argvLocal.c:184:16:184:17 | bp indirection | semmle.label | bp indirection | +| argvLocal.c:197:13:197:16 | argv | semmle.label | argv | +| argvLocal.c:197:13:197:16 | argv | semmle.label | argv | +| argvLocal.c:198:10:198:11 | (const char *)... | semmle.label | (const char *)... | +| argvLocal.c:198:10:198:11 | bp | semmle.label | bp | +| argvLocal.c:198:10:198:11 | bp indirection | semmle.label | bp indirection | +| argvLocal.c:199:16:199:17 | bp | semmle.label | bp | +| argvLocal.c:199:16:199:17 | bp | semmle.label | bp | +| argvLocal.c:199:16:199:17 | bp indirection | semmle.label | bp indirection | #select | argvLocal.c:95:9:95:15 | access to array | argvLocal.c:95:9:95:12 | argv | argvLocal.c:95:9:95:15 | access to array | The value of this argument may come from $@ and is being used as a formatting argument to printf(format). | argvLocal.c:95:9:95:12 | argv | argv | | argvLocal.c:96:15:96:21 | access to array | argvLocal.c:96:15:96:18 | argv | argvLocal.c:96:15:96:21 | access to array | The value of this argument may come from $@ and is being used as a formatting argument to printWrapper(correct), which calls printf(format). | argvLocal.c:96:15:96:18 | argv | argv | @@ -266,3 +306,7 @@ nodes | argvLocal.c:151:15:151:16 | i8 | argvLocal.c:149:11:149:14 | argv | argvLocal.c:151:15:151:16 | i8 | The value of this argument may come from $@ and is being used as a formatting argument to printWrapper(correct), which calls printf(format). | argvLocal.c:149:11:149:14 | argv | argv | | argvLocal.c:169:18:169:20 | i10 | argvLocal.c:168:18:168:21 | argv | argvLocal.c:169:18:169:20 | i10 | The value of this argument may come from $@ and is being used as a formatting argument to printf(format). | argvLocal.c:168:18:168:21 | argv | argv | | argvLocal.c:170:24:170:26 | i10 | argvLocal.c:168:18:168:21 | argv | argvLocal.c:170:24:170:26 | i10 | The value of this argument may come from $@ and is being used as a formatting argument to printWrapper(correct), which calls printf(format). | argvLocal.c:168:18:168:21 | argv | argv | +| argvLocal.c:183:10:183:11 | bp | argvLocal.c:182:13:182:16 | argv | argvLocal.c:183:10:183:11 | bp | The value of this argument may come from $@ and is being used as a formatting argument to printf(format). | argvLocal.c:182:13:182:16 | argv | argv | +| argvLocal.c:184:16:184:17 | bp | argvLocal.c:182:13:182:16 | argv | argvLocal.c:184:16:184:17 | bp | The value of this argument may come from $@ and is being used as a formatting argument to printWrapper(correct), which calls printf(format). | argvLocal.c:182:13:182:16 | argv | argv | +| argvLocal.c:198:10:198:11 | bp | argvLocal.c:197:13:197:16 | argv | argvLocal.c:198:10:198:11 | bp | The value of this argument may come from $@ and is being used as a formatting argument to printf(format). | argvLocal.c:197:13:197:16 | argv | argv | +| argvLocal.c:199:16:199:17 | bp | argvLocal.c:197:13:197:16 | argv | argvLocal.c:199:16:199:17 | bp | The value of this argument may come from $@ and is being used as a formatting argument to printWrapper(correct), which calls printf(format). | argvLocal.c:197:13:197:16 | argv | argv | diff --git a/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/AuthenticationBypass.expected b/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/AuthenticationBypass.expected index 6d9f7af1af7..11db5c7acaa 100644 --- a/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/AuthenticationBypass.expected +++ b/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/AuthenticationBypass.expected @@ -11,6 +11,18 @@ edges | test.cpp:38:25:38:30 | call to getenv | test.cpp:42:14:42:20 | address | | test.cpp:38:25:38:42 | call to getenv | test.cpp:42:14:42:20 | address | | test.cpp:38:25:38:42 | call to getenv | test.cpp:42:14:42:20 | address | +| test.cpp:49:25:49:30 | call to getenv | test.cpp:52:14:52:20 | address | +| test.cpp:49:25:49:30 | call to getenv | test.cpp:52:14:52:20 | address | +| test.cpp:49:25:49:30 | call to getenv | test.cpp:56:14:56:20 | address | +| test.cpp:49:25:49:30 | call to getenv | test.cpp:56:14:56:20 | address | +| test.cpp:49:25:49:30 | call to getenv | test.cpp:60:14:60:20 | address | +| test.cpp:49:25:49:30 | call to getenv | test.cpp:60:14:60:20 | address | +| test.cpp:49:25:49:42 | call to getenv | test.cpp:52:14:52:20 | address | +| test.cpp:49:25:49:42 | call to getenv | test.cpp:52:14:52:20 | address | +| test.cpp:49:25:49:42 | call to getenv | test.cpp:56:14:56:20 | address | +| test.cpp:49:25:49:42 | call to getenv | test.cpp:56:14:56:20 | address | +| test.cpp:49:25:49:42 | call to getenv | test.cpp:60:14:60:20 | address | +| test.cpp:49:25:49:42 | call to getenv | test.cpp:60:14:60:20 | address | subpaths nodes | test.cpp:16:25:16:30 | call to getenv | semmle.label | call to getenv | @@ -25,7 +37,18 @@ nodes | test.cpp:38:25:38:42 | call to getenv | semmle.label | call to getenv | | test.cpp:42:14:42:20 | address | semmle.label | address | | test.cpp:42:14:42:20 | address | semmle.label | address | +| test.cpp:49:25:49:30 | call to getenv | semmle.label | call to getenv | +| test.cpp:49:25:49:42 | call to getenv | semmle.label | call to getenv | +| test.cpp:52:14:52:20 | address | semmle.label | address | +| test.cpp:52:14:52:20 | address | semmle.label | address | +| test.cpp:56:14:56:20 | address | semmle.label | address | +| test.cpp:56:14:56:20 | address | semmle.label | address | +| test.cpp:60:14:60:20 | address | semmle.label | address | +| test.cpp:60:14:60:20 | address | semmle.label | address | #select | test.cpp:20:7:20:12 | call to strcmp | test.cpp:16:25:16:30 | call to getenv | test.cpp:20:14:20:20 | address | Untrusted input $@ might be vulnerable to a spoofing attack. | test.cpp:16:25:16:30 | call to getenv | call to getenv | | test.cpp:31:7:31:12 | call to strcmp | test.cpp:27:25:27:30 | call to getenv | test.cpp:31:14:31:20 | address | Untrusted input $@ might be vulnerable to a spoofing attack. | test.cpp:27:25:27:30 | call to getenv | call to getenv | | test.cpp:42:7:42:12 | call to strcmp | test.cpp:38:25:38:30 | call to getenv | test.cpp:42:14:42:20 | address | Untrusted input $@ might be vulnerable to a spoofing attack. | test.cpp:38:25:38:30 | call to getenv | call to getenv | +| test.cpp:52:7:52:12 | call to strcmp | test.cpp:49:25:49:30 | call to getenv | test.cpp:52:14:52:20 | address | Untrusted input $@ might be vulnerable to a spoofing attack. | test.cpp:49:25:49:30 | call to getenv | call to getenv | +| test.cpp:56:7:56:12 | call to strcmp | test.cpp:49:25:49:30 | call to getenv | test.cpp:56:14:56:20 | address | Untrusted input $@ might be vulnerable to a spoofing attack. | test.cpp:49:25:49:30 | call to getenv | call to getenv | +| test.cpp:60:7:60:12 | call to strcmp | test.cpp:49:25:49:30 | call to getenv | test.cpp:60:14:60:20 | address | Untrusted input $@ might be vulnerable to a spoofing attack. | test.cpp:49:25:49:30 | call to getenv | call to getenv | diff --git a/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/test.cpp b/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/test.cpp index 8ca3514055b..72b9155cb84 100644 --- a/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/test.cpp +++ b/cpp/ql/test/query-tests/Security/CWE/CWE-290/semmle/AuthenticationBypass/test.cpp @@ -43,3 +43,27 @@ void processRequest3() isServer = 1; } } + +void processRequest4() +{ + const char *address = getenv("SERVERIP"); + bool cond = false; + + if (strcmp(address, "127.0.0.1")) { cond = true; } // BAD + if (strcmp(address, "127_0_0_1")) { cond = true; } // GOOD (not an IP) + if (strcmp(address, "127.0.0")) { cond = true; } // GOOD (not an IP) + if (strcmp(address, "127.0.0.0.1")) { cond = true; } // GOOD (not an IP) + if (strcmp(address, "http://mycompany")) { cond = true; } // BAD + if (strcmp(address, "http_//mycompany")) { cond = true; } // GOOD (not an address) + if (strcmp(address, "htt://mycompany")) { cond = true; } // GOOD (not an address) + if (strcmp(address, "httpp://mycompany")) { cond = true; } // GOOD (not an address) + if (strcmp(address, "mycompany.com")) { cond = true; } // BAD + if (strcmp(address, "mycompany_com")) { cond = true; } // GOOD (not an address) + if (strcmp(address, "mycompany.c")) { cond = true; } // GOOD (not an address) + if (strcmp(address, "mycompany.comm")) { cond = true; } // GOOD (not an address) + + if (cond) { + isServer = 1; + } +} + diff --git a/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/old.dbscheme b/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/old.dbscheme new file mode 100644 index 00000000000..1136957c0b3 --- /dev/null +++ b/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/old.dbscheme @@ -0,0 +1,2069 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event | @operator; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +| 133 = @urshift_expr +| 134 = @assign_urshift_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr | @assign_urshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr | @urshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/semmlecode.csharp.dbscheme b/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/semmlecode.csharp.dbscheme new file mode 100644 index 00000000000..d0fba103f7d --- /dev/null +++ b/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/semmlecode.csharp.dbscheme @@ -0,0 +1,2069 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +| 133 = @urshift_expr +| 134 = @assign_urshift_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr | @assign_urshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr | @urshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/upgrade.properties b/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/upgrade.properties new file mode 100644 index 00000000000..b451dc684ba --- /dev/null +++ b/csharp/downgrades/1136957c0b3c73a7798ae42645c361e813295393/upgrade.properties @@ -0,0 +1,2 @@ +description: Remove operators from the virtualizable type. +compatibility: full \ No newline at end of file diff --git a/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/expressions.ql b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/expressions.ql new file mode 100644 index 00000000000..6afabce797e --- /dev/null +++ b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/expressions.ql @@ -0,0 +1,13 @@ +class Expression extends @expr { + string toString() { none() } +} + +class TypeOrRef extends @type_or_ref { + string toString() { none() } +} + +from Expression e, int k, int kind, TypeOrRef t +where + expressions(e, k, t) and + if k = [133, 134] then kind = 106 else kind = k +select e, kind, t diff --git a/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/old.dbscheme b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/old.dbscheme new file mode 100644 index 00000000000..d0fba103f7d --- /dev/null +++ b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/old.dbscheme @@ -0,0 +1,2069 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +| 133 = @urshift_expr +| 134 = @assign_urshift_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr | @assign_urshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr | @urshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/semmlecode.csharp.dbscheme b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/semmlecode.csharp.dbscheme new file mode 100644 index 00000000000..83aca6b3e4f --- /dev/null +++ b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/semmlecode.csharp.dbscheme @@ -0,0 +1,2067 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/upgrade.properties b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/upgrade.properties new file mode 100644 index 00000000000..d3e8b5e6318 --- /dev/null +++ b/csharp/downgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/upgrade.properties @@ -0,0 +1,3 @@ +description: Remove unsigned right shift and unsigned right shift assignment expression kinds. +compatibility: backwards +expressions.rel: run expressions.qlo \ No newline at end of file diff --git a/csharp/extractor/Semmle.Extraction.CIL/Entities/DefinitionMethod.cs b/csharp/extractor/Semmle.Extraction.CIL/Entities/DefinitionMethod.cs index 073527a523b..0a3cb8e998f 100644 --- a/csharp/extractor/Semmle.Extraction.CIL/Entities/DefinitionMethod.cs +++ b/csharp/extractor/Semmle.Extraction.CIL/Entities/DefinitionMethod.cs @@ -92,7 +92,8 @@ namespace Semmle.Extraction.CIL.Entities yield return Tuples.cil_parameter_out(pe); if (p.Attributes.HasFlag(ParameterAttributes.In)) yield return Tuples.cil_parameter_in(pe); - Attribute.Populate(Context, pe, p.GetCustomAttributes()); + foreach (var c in Attribute.Populate(Context, pe, p.GetCustomAttributes())) + yield return c; } yield return Tuples.metadata_handle(this, Context.Assembly, MetadataTokens.GetToken(handle)); @@ -205,7 +206,8 @@ namespace Semmle.Extraction.CIL.Entities yield return Tuples.cil_newslot(this); // Populate attributes - Attribute.Populate(Context, this, md.GetCustomAttributes()); + foreach (var c in Attribute.Populate(Context, this, md.GetCustomAttributes())) + yield return c; } } diff --git a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expression.cs b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expression.cs index 6e0380da693..3984e7c00cf 100644 --- a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expression.cs +++ b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expression.cs @@ -240,7 +240,7 @@ namespace Semmle.Extraction.CSharp.Entities var callType = GetCallType(Context, node); if (callType == CallType.Dynamic) { - UserOperator.OperatorSymbol(method.Name, out var operatorName); + UserOperator.TryGetOperatorSymbol(method.Name, out var operatorName); trapFile.dynamic_member_name(this, operatorName); return; } diff --git a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Assignment.cs b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Assignment.cs index 553d6d8349a..cbd7afbc9fa 100644 --- a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Assignment.cs +++ b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Assignment.cs @@ -71,6 +71,8 @@ namespace Semmle.Extraction.CSharp.Entities.Expressions return ExprKind.ASSIGN_LSHIFT; case SyntaxKind.GreaterThanGreaterThanEqualsToken: return ExprKind.ASSIGN_RSHIFT; + case SyntaxKind.GreaterThanGreaterThanGreaterThanEqualsToken: + return ExprKind.ASSIGN_URSHIFT; case SyntaxKind.QuestionQuestionEqualsToken: return ExprKind.ASSIGN_COALESCE; default: @@ -141,6 +143,8 @@ namespace Semmle.Extraction.CSharp.Entities.Expressions return ExprKind.REM; case ExprKind.ASSIGN_RSHIFT: return ExprKind.RSHIFT; + case ExprKind.ASSIGN_URSHIFT: + return ExprKind.URSHIFT; case ExprKind.ASSIGN_SUB: return ExprKind.SUB; case ExprKind.ASSIGN_XOR: diff --git a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Binary.cs b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Binary.cs index 5153c856a25..45d43ac94c0 100644 --- a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Binary.cs +++ b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Binary.cs @@ -50,6 +50,7 @@ namespace Semmle.Extraction.CSharp.Entities.Expressions case SyntaxKind.BarBarToken: return ExprKind.LOG_OR; case SyntaxKind.GreaterThanEqualsToken: return ExprKind.GE; case SyntaxKind.GreaterThanGreaterThanToken: return ExprKind.RSHIFT; + case SyntaxKind.GreaterThanGreaterThanGreaterThanToken: return ExprKind.URSHIFT; case SyntaxKind.LessThanLessThanToken: return ExprKind.LSHIFT; case SyntaxKind.CaretToken: return ExprKind.BIT_XOR; case SyntaxKind.QuestionQuestionToken: return ExprKind.NULL_COALESCING; diff --git a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Factory.cs b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Factory.cs index a92715c4e1c..57e9dd47ef3 100644 --- a/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Factory.cs +++ b/csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Factory.cs @@ -38,6 +38,7 @@ namespace Semmle.Extraction.CSharp.Entities.Expressions case SyntaxKind.IsExpression: case SyntaxKind.AsExpression: case SyntaxKind.RightShiftExpression: + case SyntaxKind.UnsignedRightShiftExpression: case SyntaxKind.LeftShiftExpression: case SyntaxKind.ExclusiveOrExpression: case SyntaxKind.CoalesceExpression: @@ -76,6 +77,7 @@ namespace Semmle.Extraction.CSharp.Entities.Expressions case SyntaxKind.ExclusiveOrAssignmentExpression: case SyntaxKind.LeftShiftAssignmentExpression: case SyntaxKind.RightShiftAssignmentExpression: + case SyntaxKind.UnsignedRightShiftAssignmentExpression: case SyntaxKind.DivideAssignmentExpression: case SyntaxKind.ModuloAssignmentExpression: case SyntaxKind.CoalesceAssignmentExpression: diff --git a/csharp/extractor/Semmle.Extraction.CSharp/Entities/UserOperator.cs b/csharp/extractor/Semmle.Extraction.CSharp/Entities/UserOperator.cs index 536af5065ed..f478d991919 100644 --- a/csharp/extractor/Semmle.Extraction.CSharp/Entities/UserOperator.cs +++ b/csharp/extractor/Semmle.Extraction.CSharp/Entities/UserOperator.cs @@ -61,8 +61,7 @@ namespace Semmle.Extraction.CSharp.Entities containingType = Symbol.ContainingType; if (containingType is not null) { - var containingNamedType = containingType as INamedTypeSymbol; - return containingNamedType is null || + return containingType is not INamedTypeSymbol containingNamedType || !containingNamedType.GetMembers(Symbol.Name).Contains(Symbol); } @@ -83,7 +82,7 @@ namespace Semmle.Extraction.CSharp.Entities /// /// The method name. /// The converted operator name. - public static bool OperatorSymbol(string methodName, out string operatorName) + public static bool TryGetOperatorSymbol(string methodName, out string operatorName) { var success = true; switch (methodName) @@ -147,6 +146,9 @@ namespace Semmle.Extraction.CSharp.Entities case "op_RightShift": operatorName = ">>"; break; + case "op_UnsignedRightShift": + operatorName = ">>>"; + break; case "op_LeftShift": operatorName = "<<"; break; @@ -166,7 +168,7 @@ namespace Semmle.Extraction.CSharp.Entities var match = Regex.Match(methodName, "^op_Checked(.*)$"); if (match.Success) { - OperatorSymbol("op_" + match.Groups[1], out var uncheckedName); + TryGetOperatorSymbol("op_" + match.Groups[1], out var uncheckedName); operatorName = "checked " + uncheckedName; break; } @@ -190,7 +192,7 @@ namespace Semmle.Extraction.CSharp.Entities return OperatorSymbol(cx, method.ExplicitInterfaceImplementations.First()); var methodName = method.Name; - if (!OperatorSymbol(methodName, out var result)) + if (!TryGetOperatorSymbol(methodName, out var result)) cx.ModelError(method, $"Unhandled operator name in OperatorSymbol(): '{methodName}'"); return result; } diff --git a/csharp/extractor/Semmle.Extraction.CSharp/Kinds/ExprKind.cs b/csharp/extractor/Semmle.Extraction.CSharp/Kinds/ExprKind.cs index a56ccf4c746..ef0b9412ef4 100644 --- a/csharp/extractor/Semmle.Extraction.CSharp/Kinds/ExprKind.cs +++ b/csharp/extractor/Semmle.Extraction.CSharp/Kinds/ExprKind.cs @@ -127,6 +127,8 @@ namespace Semmle.Extraction.Kinds WITH = 130, LIST_PATTERN = 131, SLICE_PATTERN = 132, + URSHIFT = 133, + ASSIGN_URSHIFT = 134, DEFINE_SYMBOL = 999, } } diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index dff41cdf8da..8966ac26c12 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.4.1 + +No user-facing changes. + ## 1.4.0 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.4.1.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.4.1.md new file mode 100644 index 00000000000..38987aa49cd --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.4.1.md @@ -0,0 +1,3 @@ +## 1.4.1 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index b8b2e97d508..43ccf4467be 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.4.0 +lastReleaseVersion: 1.4.1 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index a24d7b8d582..b3bbf553151 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.4.1-dev +version: 1.4.2-dev groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index dff41cdf8da..8966ac26c12 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.4.1 + +No user-facing changes. + ## 1.4.0 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.4.1.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.4.1.md new file mode 100644 index 00000000000..38987aa49cd --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.4.1.md @@ -0,0 +1,3 @@ +## 1.4.1 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index b8b2e97d508..43ccf4467be 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.4.0 +lastReleaseVersion: 1.4.1 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index b8fe38701b4..5678734ce2d 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.4.1-dev +version: 1.4.2-dev groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 1d8939d2fd2..a667a9506eb 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,18 @@ +## 0.5.1 + +### Major Analysis Improvements + +* Added library support for generic attributes (also for CIL extracted attributes). +* `cil.ConstructedType::getName` was changed to include printing of the type arguments. + +### Minor Analysis Improvements + +* Attributes on methods in CIL are now extracted (Bugfix). +* Support for `static virtual` and `static abstract` interface members. +* Support for *operators* in interface definitions. +* C# 11: Added support for the unsigned right shift `>>>` and unsigned right shift assignment `>>>=` operators. +* Query id's have been aligned such that they are prefixed with `cs` instead of `csharp`. + ## 0.5.0 ### Minor Analysis Improvements diff --git a/csharp/ql/lib/change-notes/2023-01-03-queryids.md b/csharp/ql/lib/change-notes/2023-01-03-queryids.md deleted file mode 100644 index e0b5220df35..00000000000 --- a/csharp/ql/lib/change-notes/2023-01-03-queryids.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Query id's have been aligned such that they are prefixed with `cs` instead of `csharp`. \ No newline at end of file diff --git a/csharp/ql/lib/change-notes/released/0.5.1.md b/csharp/ql/lib/change-notes/released/0.5.1.md new file mode 100644 index 00000000000..0ae25ddfc8c --- /dev/null +++ b/csharp/ql/lib/change-notes/released/0.5.1.md @@ -0,0 +1,14 @@ +## 0.5.1 + +### Major Analysis Improvements + +* Added library support for generic attributes (also for CIL extracted attributes). +* `cil.ConstructedType::getName` was changed to include printing of the type arguments. + +### Minor Analysis Improvements + +* Attributes on methods in CIL are now extracted (Bugfix). +* Support for `static virtual` and `static abstract` interface members. +* Support for *operators* in interface definitions. +* C# 11: Added support for the unsigned right shift `>>>` and unsigned right shift assignment `>>>=` operators. +* Query id's have been aligned such that they are prefixed with `cs` instead of `csharp`. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index 30e271c5361..0bf7024c337 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.5.1 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index 7c5c234f07f..4a6da073de5 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 0.5.1-dev +version: 0.5.2-dev groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/lib/semmle/code/cil/Attribute.qll b/csharp/ql/lib/semmle/code/cil/Attribute.qll index b1202ab17cc..0f98c1c5ed4 100644 --- a/csharp/ql/lib/semmle/code/cil/Attribute.qll +++ b/csharp/ql/lib/semmle/code/cil/Attribute.qll @@ -27,3 +27,19 @@ class Attribute extends Element, @cil_attribute { override CS::Location getLocation() { result = getDeclaration().getLocation() } } + +/** A generic attribute to a declaration. */ +class GenericAttribute extends Attribute { + private ConstructedType type; + + GenericAttribute() { type = this.getType() } + + /** Gets the total number of type arguments. */ + int getNumberOfTypeArguments() { result = count(int i | cil_type_argument(type, i, _)) } + + /** Gets the `i`th type argument, if any. */ + Type getTypeArgument(int i) { result = type.getTypeArgument(i) } + + /** Get a type argument. */ + Type getATypeArgument() { result = this.getTypeArgument(_) } +} diff --git a/csharp/ql/lib/semmle/code/cil/Generics.qll b/csharp/ql/lib/semmle/code/cil/Generics.qll index 2e702e68ffe..faacc2745ae 100644 --- a/csharp/ql/lib/semmle/code/cil/Generics.qll +++ b/csharp/ql/lib/semmle/code/cil/Generics.qll @@ -28,6 +28,12 @@ class ConstructedGeneric extends Generic, DotNet::ConstructedGeneric { final override Type getTypeArgument(int n) { cil_type_argument(this, n, result) } } +/** Gets the concatenation of the `getName()` of type arguments. */ +language[monotonicAggregates] +private string getTypeArgumentsNames(ConstructedGeneric cg) { + result = strictconcat(Type t, int i | t = cg.getTypeArgument(i) | t.getName(), "," order by i) +} + /** An unbound generic type. */ class UnboundGenericType extends UnboundGeneric, Type { } @@ -41,6 +47,10 @@ class ConstructedType extends ConstructedGeneric, Type { override predicate isInterface() { this.getUnboundType().isInterface() } override predicate isClass() { this.getUnboundType().isClass() } + + final override string getName() { + result = this.getUndecoratedName() + "<" + getTypeArgumentsNames(this) + ">" + } } /** A constructed generic method. */ diff --git a/csharp/ql/lib/semmle/code/csharp/Attribute.qll b/csharp/ql/lib/semmle/code/csharp/Attribute.qll index 0910ade7d0f..13769295428 100644 --- a/csharp/ql/lib/semmle/code/csharp/Attribute.qll +++ b/csharp/ql/lib/semmle/code/csharp/Attribute.qll @@ -37,8 +37,14 @@ class Attributable extends @attributable { } private string getAttributeName(Attribute a) { - exists(string type | type = a.getType().getName() | - if type.matches("%Attribute") then result = type.prefix(type.length() - 9) else result = type + exists(string type, string pattern | + type = a.getType().getName() and pattern = "(.*)Attribute(<.*>)?" + | + type.regexpMatch(pattern) and + result = concat(int i | i = [1, 2] | type.regexpCapture(pattern, i) order by i) + or + not type.regexpMatch(pattern) and + result = type ) } @@ -99,6 +105,31 @@ class Attribute extends TopLevelExprParent, @attribute { override string getAPrimaryQlClass() { result = "Attribute" } } +/** + * A generic attribute, for example `[...]` on line 1 in + * + * ```csharp + * [MyGenericAttribute(0)] + * public void SomeMethod(string s) { } + * ``` + */ +class GenericAttribute extends Attribute { + private ConstructedClass type; + + GenericAttribute() { type = this.getType() } + + /** Gets the total number of type arguments. */ + int getNumberOfTypeArguments() { result = count(int i | type_arguments(_, i, type)) } + + /** Gets the `i`th type argument, if any. */ + Type getTypeArgument(int i) { result = type.getTypeArgument(i) } + + /** Get a type argument. */ + Type getATypeArgument() { result = this.getTypeArgument(_) } + + override string getAPrimaryQlClass() { result = "GenericAttribute" } +} + /** * An attribute with default kind, for example `[...]` on line 1 in * ```csharp @@ -110,6 +141,17 @@ class DefaultAttribute extends Attribute, @attribute_default { override string getAPrimaryQlClass() { result = "DefaultAttribute" } } +/** + * A generic attribute with default kind, for example `[...]` on line 1 in + * ```csharp + * [MyAttribute(0)] + * int SomeMethod() { return 1; } + * ``` + */ +class GenericDefaultAttribute extends GenericAttribute, DefaultAttribute { + override string getAPrimaryQlClass() { result = "GenericDefaultAttribute" } +} + /** * An attribute with return kind, for example `[...]` on line 1 in * ```csharp @@ -123,6 +165,17 @@ class ReturnAttribute extends Attribute, @attribute_return { override string getAPrimaryQlClass() { result = "ReturnAttribute" } } +/** + * A generic attribute with return kind, for example `[...]` on line 1 in + * ```csharp + * [return: MyAttribute(0)] + * int SomeMethod() { return 1; } + * ``` + */ +class GenericReturnAttribute extends GenericAttribute, ReturnAttribute { + override string getAPrimaryQlClass() { result = "GenericReturnAttribute" } +} + /** * An attribute with assembly kind, for example `[...]` on line 1 in * ```csharp @@ -135,6 +188,16 @@ class AssemblyAttribute extends Attribute, @attribute_assembly { override string getAPrimaryQlClass() { result = "AssemblyAttribute" } } +/** + * A generic attribute with assembly kind, for example `[...]` on line 1 in + * ```csharp + * [assembly: MyAttribute(0)] + * ``` + */ +class GenericAssemblyAttribute extends GenericAttribute, AssemblyAttribute { + override string getAPrimaryQlClass() { result = "GenericAssemblyAttribute" } +} + /** * An attribute with module kind, for example `[...]` on line 1 in * ```csharp @@ -146,3 +209,13 @@ class ModuleAttribute extends Attribute, @attribute_module { override string getAPrimaryQlClass() { result = "ModuleAttribute" } } + +/** + * A generic attribute with module kind, for example `[...]` on line 1 in + * ```csharp + * [module: MyAttribute(0)] + * ``` + */ +class GenericModuleAttribute extends GenericAttribute, ModuleAttribute { + override string getAPrimaryQlClass() { result = "GenericModuleAttribute" } +} diff --git a/csharp/ql/lib/semmle/code/csharp/Callable.qll b/csharp/ql/lib/semmle/code/csharp/Callable.qll index bc8e1294adb..ea88f814bce 100644 --- a/csharp/ql/lib/semmle/code/csharp/Callable.qll +++ b/csharp/ql/lib/semmle/code/csharp/Callable.qll @@ -636,8 +636,9 @@ class TrueOperator extends UnaryOperator { * (`SubOperator`), a multiplication operator (`MulOperator`), a division * operator (`DivOperator`), a remainder operator (`RemOperator`), an and * operator (`AndOperator`), an or operator (`OrOperator`), an xor - * operator (`XorOperator`), a left shift operator (`LShiftOperator`), - * a right shift operator (`RShiftOperator`), an equals operator (`EQOperator`), + * operator (`XorOperator`), a left shift operator (`LeftShiftOperator`), + * a right shift operator (`RightShiftOperator`), an unsigned right shift + * operator(`UnsignedRightShiftOperator`), an equals operator (`EQOperator`), * a not equals operator (`NEOperator`), a lesser than operator (`LTOperator`), * a greater than operator (`GTOperator`), a less than or equals operator * (`LEOperator`), or a greater than or equals operator (`GEOperator`). @@ -791,14 +792,17 @@ class XorOperator extends BinaryOperator { * } * ``` */ -class LShiftOperator extends BinaryOperator { - LShiftOperator() { this.getName() = "<<" } +class LeftShiftOperator extends BinaryOperator { + LeftShiftOperator() { this.getName() = "<<" } override string getFunctionName() { result = "op_LeftShift" } - override string getAPrimaryQlClass() { result = "LShiftOperator" } + override string getAPrimaryQlClass() { result = "LeftShiftOperator" } } +/** DEPRECATED: Alias for LeftShiftOperator. */ +deprecated class LShiftOperator = LeftShiftOperator; + /** * A user-defined right shift operator (`>>`), for example * @@ -808,12 +812,32 @@ class LShiftOperator extends BinaryOperator { * } * ``` */ -class RShiftOperator extends BinaryOperator { - RShiftOperator() { this.getName() = ">>" } +class RightShiftOperator extends BinaryOperator { + RightShiftOperator() { this.getName() = ">>" } override string getFunctionName() { result = "op_RightShift" } - override string getAPrimaryQlClass() { result = "RShiftOperator" } + override string getAPrimaryQlClass() { result = "RightShiftOperator" } +} + +/** DEPRECATED: Alias for RightShiftOperator. */ +deprecated class RShiftOperator = RightShiftOperator; + +/** + * A user-defined unsigned right shift operator (`>>>`), for example + * + * ```csharp + * public static Widget operator >>>(Widget lhs, Widget rhs) { + * ... + * } + * ``` + */ +class UnsignedRightShiftOperator extends BinaryOperator { + UnsignedRightShiftOperator() { this.getName() = ">>>" } + + override string getFunctionName() { result = "op_UnsignedRightShift" } + + override string getAPrimaryQlClass() { result = "UnsignedRightShiftOperator" } } /** diff --git a/csharp/ql/lib/semmle/code/csharp/Implements.qll b/csharp/ql/lib/semmle/code/csharp/Implements.qll index af7fa7c0e46..96556293a9d 100644 --- a/csharp/ql/lib/semmle/code/csharp/Implements.qll +++ b/csharp/ql/lib/semmle/code/csharp/Implements.qll @@ -129,7 +129,7 @@ pragma[nomagic] private Virtualizable getACompatibleInterfaceMemberAux(Virtualizable m) { result = getACompatibleInterfaceAccessor(m) or result = getACompatibleInterfaceIndexer(m) or - result = getACompatibleInterfaceMethod(m) + result = getACompatibleRelevantInterfaceMember(m) } /** @@ -210,11 +210,13 @@ private predicate getACompatibleInterfaceIndexerAux(Indexer i, ValueOrRefType t) t = getAPossibleImplementor(i.getDeclaringType()) } -private Method getACompatibleInterfaceMethod0(Method m, int i) { - result = getAnInterfaceMethodCandidate(m) and +private RelevantInterfaceMember getACompatibleRelevantInterfaceMember0( + RelevantInterfaceMember m, int i +) { + result = getARelevantInterfaceMemberCandidate(m) and i = -1 or - result = getACompatibleInterfaceMethod0(m, i - 1) and + result = getACompatibleRelevantInterfaceMember0(m, i - 1) and exists(Type t1, Type t2 | t1 = getArgumentOrReturnType(m, i) and t2 = getArgumentOrReturnType(result, i) @@ -223,32 +225,47 @@ private Method getACompatibleInterfaceMethod0(Method m, int i) { ) } -private Method getACompatibleInterfaceMethod(Method m) { - result = getACompatibleInterfaceMethod0(m, m.getNumberOfParameters()) +/** + * A class of callables relevant for interface member compatibility. + */ +private class RelevantInterfaceMember extends Callable { + RelevantInterfaceMember() { + this instanceof Method or + this instanceof Operator + } + + predicate isPublic() { + this.(Method).isPublic() or + this.(Operator).isPublic() + } +} + +private RelevantInterfaceMember getACompatibleRelevantInterfaceMember(RelevantInterfaceMember m) { + result = getACompatibleRelevantInterfaceMember0(m, m.getNumberOfParameters()) } /** - * Gets an interface method that may potentially be implemented by `m`. + * Gets an interface method or operator that may potentially be implemented by `m`. * * That is, a method with the same name, same number of parameters, and declared * in a type that is a possible implementor type for the interface type. */ -private Method getAnInterfaceMethodCandidate(Method m) { - getAPotentialInterfaceMethodAux(result, m.getDeclaringType(), m.getUndecoratedName(), +private RelevantInterfaceMember getARelevantInterfaceMemberCandidate(RelevantInterfaceMember m) { + getAPotentialRelevantInterfaceMemberAux(result, m.getDeclaringType(), m.getUndecoratedName(), m.getNumberOfParameters()) and m.isPublic() } pragma[nomagic] -private predicate getAPotentialInterfaceMethodAux( - Method m, ValueOrRefType t, string name, int params +private predicate getAPotentialRelevantInterfaceMemberAux( + RelevantInterfaceMember m, ValueOrRefType t, string name, int params ) { t = getAPossibleImplementor(m.getDeclaringType()) and name = m.getUndecoratedName() and params = m.getNumberOfParameters() } -private Type getArgumentOrReturnType(Method m, int i) { +private Type getArgumentOrReturnType(RelevantInterfaceMember m, int i) { i = 0 and result = m.getReturnType() or result = m.getParameter(i - 1).getType() diff --git a/csharp/ql/lib/semmle/code/csharp/Member.qll b/csharp/ql/lib/semmle/code/csharp/Member.qll index ad314217024..85225ac44cf 100644 --- a/csharp/ql/lib/semmle/code/csharp/Member.qll +++ b/csharp/ql/lib/semmle/code/csharp/Member.qll @@ -184,7 +184,7 @@ private class TOverridable = @virtualizable or @callable_accessor; /** * A declaration that can be overridden or implemented. That is, a method, - * a property, an indexer, an event, or an accessor. + * a property, an indexer, an event, an accessor, or an operator. * * Unlike `Virtualizable`, this class includes accessors. */ @@ -360,7 +360,7 @@ class Overridable extends Declaration, TOverridable { /** * A member where the `virtual` modifier is valid. That is, a method, - * a property, an indexer, or an event. + * a property, an indexer, an event, or an operator. * * Equivalently, these are the members that can be defined in an interface. * diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll index 2db7eff0c75..196af2a449d 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll @@ -410,11 +410,6 @@ Element interpretElement( ) } -/** - * Holds if `c` has a `generated` summary. - */ -predicate hasSummary(Callable c, boolean generated) { summaryElement(c, _, _, _, generated) } - cached private module Cached { /** diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/ModulusAnalysis.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/ModulusAnalysis.qll index b919d143a39..5b2a39ad6c9 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/ModulusAnalysis.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/ModulusAnalysis.qll @@ -105,7 +105,7 @@ private predicate evenlyDivisibleExpr(Expr e, int factor) { exists(ConstantIntegerExpr c, int k | k = c.getIntValue() | e.(MulExpr).getAnOperand() = c and factor = k.abs() and factor >= 2 or - e.(LShiftExpr).getRhs() = c and factor = 2.pow(k) and k > 0 + e.(LeftShiftExpr).getRhs() = c and factor = 2.pow(k) and k > 0 or e.(BitwiseAndExpr).getAnOperand() = c and factor = max(int f | andmaskFactor(k, f)) ) diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplConsistency.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplConsistency.qll index 533899e8a85..9bbc70fbdf9 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplConsistency.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowImplConsistency.qll @@ -45,6 +45,16 @@ module Consistency { ) { none() } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodeAtPosition`. */ + predicate uniqueParameterNodeAtPositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodePosition`. */ + predicate uniqueParameterNodePositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } } private class RelevantNode extends Node { @@ -246,6 +256,7 @@ module Consistency { query predicate uniqueParameterNodeAtPosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodeAtPositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(Node p0 | isParameterNode(p0, c, pos))) and msg = "Parameters with overlapping positions." @@ -254,6 +265,7 @@ module Consistency { query predicate uniqueParameterNodePosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodePositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(ParameterPosition pos0 | isParameterNode(p, c, pos0))) and msg = "Parameter node with multiple positions." diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImpl.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImpl.qll index d722aa68b70..85ffeb62e5f 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImpl.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImpl.qll @@ -39,6 +39,11 @@ module Public { ) or exists(ReturnKind rk | this = TReturnSummaryComponent(rk) and result = "return (" + rk + ")") + or + exists(SummaryComponent::SyntheticGlobal sg | + this = TSyntheticGlobalSummaryComponent(sg) and + result = "synthetic global (" + sg + ")" + ) } } @@ -159,24 +164,24 @@ module Public { SummaryComponentStack return(ReturnKind rk) { result = singleton(SummaryComponent::return(rk)) } } - private predicate noComponentSpecificCsv(SummaryComponent sc) { - not exists(getComponentSpecificCsv(sc)) + private predicate noComponentSpecific(SummaryComponent sc) { + not exists(getComponentSpecific(sc)) } /** Gets a textual representation of this component used for flow summaries. */ - private string getComponentCsv(SummaryComponent sc) { - result = getComponentSpecificCsv(sc) + private string getComponent(SummaryComponent sc) { + result = getComponentSpecific(sc) or - noComponentSpecificCsv(sc) and + noComponentSpecific(sc) and ( exists(ArgumentPosition pos | sc = TParameterSummaryComponent(pos) and - result = "Parameter[" + getArgumentPositionCsv(pos) + "]" + result = "Parameter[" + getArgumentPosition(pos) + "]" ) or exists(ParameterPosition pos | sc = TArgumentSummaryComponent(pos) and - result = "Argument[" + getParameterPositionCsv(pos) + "]" + result = "Argument[" + getParameterPosition(pos) + "]" ) or sc = TReturnSummaryComponent(getReturnValueKind()) and result = "ReturnValue" @@ -184,16 +189,16 @@ module Public { } /** Gets a textual representation of this stack used for flow summaries. */ - string getComponentStackCsv(SummaryComponentStack stack) { + string getComponentStack(SummaryComponentStack stack) { exists(SummaryComponent head, SummaryComponentStack tail | head = stack.head() and tail = stack.tail() and - result = getComponentStackCsv(tail) + "." + getComponentCsv(head) + result = getComponentStack(tail) + "." + getComponent(head) ) or exists(SummaryComponent c | stack = TSingletonSummaryComponentStack(c) and - result = getComponentCsv(c) + result = getComponent(c) ) } @@ -241,15 +246,19 @@ module Public { } /** - * Holds if the summary is auto generated and not manually generated. + * Holds if all the summaries that apply to `this` are auto generated and not manually created. */ - predicate isAutoGenerated() { none() } + final predicate isAutoGenerated() { this.hasProvenance("generated") and not this.isManual() } /** - * Holds if the summary has the given provenance where `true` is - * `generated` and `false` is `manual`. + * Holds if there exists a manual summary that applies to `this`. */ - predicate hasProvenance(boolean generated) { none() } + final predicate isManual() { this.hasProvenance("manual") } + + /** + * Holds if there exists a summary that applies to `this` that has provenance `provenance`. + */ + predicate hasProvenance(string provenance) { none() } } /** A callable where there is no flow via the callable. */ @@ -257,15 +266,19 @@ module Public { NeutralCallable() { neutralElement(this, _) } /** - * Holds if the neutral is auto generated. + * Holds if the neutral is auto generated. */ - predicate isAutoGenerated() { neutralElement(this, true) } + predicate isAutoGenerated() { neutralElement(this, "generated") } /** - * Holds if the neutral has the given provenance where `true` is - * `generated` and `false` is `manual`. + * Holds if there exists a manual neutral that applies to `this`. */ - predicate hasProvenance(boolean generated) { neutralElement(this, generated) } + final predicate isManual() { this.hasProvenance("manual") } + + /** + * Holds if the neutral has provenance `provenance`. + */ + predicate hasProvenance(string provenance) { neutralElement(this, provenance) } } } @@ -997,12 +1010,12 @@ module Private { private predicate relevantSummaryElementGenerated( AccessPath inSpec, AccessPath outSpec, string kind ) { - summaryElement(this, inSpec, outSpec, kind, true) and - not summaryElement(this, _, _, _, false) + summaryElement(this, inSpec, outSpec, kind, "generated") and + not summaryElement(this, _, _, _, "manual") } private predicate relevantSummaryElement(AccessPath inSpec, AccessPath outSpec, string kind) { - summaryElement(this, inSpec, outSpec, kind, false) + summaryElement(this, inSpec, outSpec, kind, "manual") or this.relevantSummaryElementGenerated(inSpec, outSpec, kind) } @@ -1021,10 +1034,8 @@ module Private { ) } - override predicate isAutoGenerated() { this.relevantSummaryElementGenerated(_, _, _) } - - override predicate hasProvenance(boolean generated) { - summaryElement(this, _, _, _, generated) + override predicate hasProvenance(string provenance) { + summaryElement(this, _, _, _, provenance) } } @@ -1211,8 +1222,8 @@ module Private { c.relevantSummary(input, output, preservesValue) and csv = c.getCallableCsv() // Callable information - + getComponentStackCsv(input) + ";" // input - + getComponentStackCsv(output) + ";" // output + + getComponentStack(input) + ";" // input + + getComponentStack(output) + ";" // output + renderKind(preservesValue) + ";" // kind + renderProvenance(c) // provenance ) diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImplSpecific.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImplSpecific.qll index 251e9ebf5fe..01637d912b7 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImplSpecific.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/FlowSummaryImplSpecific.qll @@ -97,69 +97,52 @@ DataFlowType getSyntheticGlobalType(SummaryComponent::SyntheticGlobal sg) { result = Gvn::getGlobalValueNumber(any(ObjectType t)) } -bindingset[provenance] -private boolean isGenerated(string provenance) { - provenance = "generated" and result = true - or - provenance != "generated" and result = false -} - /** * Holds if an external flow summary exists for `c` with input specification - * `input`, output specification `output`, kind `kind`, and a flag `generated` - * stating whether the summary is autogenerated. + * `input`, output specification `output`, kind `kind`, and provenance `provenance`. */ -predicate summaryElement(Callable c, string input, string output, string kind, boolean generated) { +predicate summaryElement(Callable c, string input, string output, string kind, string provenance) { exists( - string namespace, string type, boolean subtypes, string name, string signature, string ext, - string provenance + string namespace, string type, boolean subtypes, string name, string signature, string ext | summaryModel(namespace, type, subtypes, name, signature, ext, input, output, kind, provenance) and - generated = isGenerated(provenance) and c = interpretElement(namespace, type, subtypes, name, signature, ext) ) } /** - * Holds if a neutral model exists for `c`, which means that there is no - * flow through `c`. The flag `generated` states whether the neutral model is autogenerated. + * Holds if a neutral model exists for `c` with provenance `provenace`, + * which means that there is no flow through `c`. */ -predicate neutralElement(Callable c, boolean generated) { - exists(string namespace, string type, string name, string signature, string provenance | +predicate neutralElement(Callable c, string provenance) { + exists(string namespace, string type, string name, string signature | neutralModel(namespace, type, name, signature, provenance) and - generated = isGenerated(provenance) and c = interpretElement(namespace, type, false, name, signature, "") ) } /** * Holds if an external source specification exists for `e` with output specification - * `output`, kind `kind`, and a flag `generated` stating whether the source specification is - * autogenerated. + * `output`, kind `kind`, and provenance `provenance`. */ -predicate sourceElement(Element e, string output, string kind, boolean generated) { +predicate sourceElement(Element e, string output, string kind, string provenance) { exists( - string namespace, string type, boolean subtypes, string name, string signature, string ext, - string provenance + string namespace, string type, boolean subtypes, string name, string signature, string ext | sourceModel(namespace, type, subtypes, name, signature, ext, output, kind, provenance) and - generated = isGenerated(provenance) and e = interpretElement(namespace, type, subtypes, name, signature, ext) ) } /** * Holds if an external sink specification exists for `e` with input specification - * `input`, kind `kind` and a flag `generated` stating whether the sink specification is - * autogenerated. + * `input`, kind `kind` and provenance `provenance`. */ -predicate sinkElement(Element e, string input, string kind, boolean generated) { +predicate sinkElement(Element e, string input, string kind, string provenance) { exists( - string namespace, string type, boolean subtypes, string name, string signature, string ext, - string provenance + string namespace, string type, boolean subtypes, string name, string signature, string ext | sinkModel(namespace, type, subtypes, name, signature, ext, input, kind, provenance) and - generated = isGenerated(provenance) and e = interpretElement(namespace, type, subtypes, name, signature, ext) ) } @@ -195,7 +178,7 @@ SummaryComponent interpretComponentSpecific(AccessPathToken c) { } /** Gets the textual representation of the content in the format used for flow summaries. */ -private string getContentSpecificCsv(Content c) { +private string getContentSpecific(Content c) { c = TElementContent() and result = "Element" or exists(Field f | c = TFieldContent(f) and result = "Field[" + f.getQualifiedName() + "]") @@ -206,8 +189,8 @@ private string getContentSpecificCsv(Content c) { } /** Gets the textual representation of a summary component in the format used for flow summaries. */ -string getComponentSpecificCsv(SummaryComponent sc) { - exists(Content c | sc = TContentSummaryComponent(c) and result = getContentSpecificCsv(c)) +string getComponentSpecific(SummaryComponent sc) { + exists(Content c | sc = TContentSummaryComponent(c) and result = getContentSpecific(c)) or sc = TWithoutContentSummaryComponent(_) and result = "WithoutElement" or @@ -221,7 +204,7 @@ string getComponentSpecificCsv(SummaryComponent sc) { } /** Gets the textual representation of a parameter position in the format used for flow summaries. */ -string getParameterPositionCsv(ParameterPosition pos) { +string getParameterPosition(ParameterPosition pos) { result = pos.getPosition().toString() or pos.isThisParameter() and @@ -229,7 +212,7 @@ string getParameterPositionCsv(ParameterPosition pos) { } /** Gets the textual representation of an argument position in the format used for flow summaries. */ -string getArgumentPositionCsv(ArgumentPosition pos) { +string getArgumentPosition(ArgumentPosition pos) { result = pos.getPosition().toString() or pos.isQualifier() and diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll index 74aee61e690..4a9c3cdbe6d 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll @@ -30,7 +30,7 @@ module Private { class MulExpr = RU::ExprNode::MulExpr; - class LShiftExpr = RU::ExprNode::LShiftExpr; + class LeftShiftExpr = RU::ExprNode::LeftShiftExpr; predicate guardDirectlyControlsSsaRead = RU::guardControlsSsaRead/3; diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll index ce7637ccd92..fe4505b6e2e 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll @@ -391,17 +391,24 @@ module ExprNode { } /** A left-shift operation. */ - class LShiftExpr extends BinaryOperation { - override CS::LShiftExpr e; + class LeftShiftExpr extends BinaryOperation { + override CS::LeftShiftExpr e; - override TLShiftOp getOp() { any() } + override TLeftShiftOp getOp() { any() } } /** A right-shift operation. */ - class RShiftExpr extends BinaryOperation { - override CS::RShiftExpr e; + class RightShiftExpr extends BinaryOperation { + override CS::RightShiftExpr e; - override TRShiftOp getOp() { any() } + override TRightShiftOp getOp() { any() } + } + + /** An unsigned right-shift operation. */ + class UnsignedRightShiftExpr extends BinaryOperation { + override CS::UnsignedRightShiftExpr e; + + override TUnsignedRightShiftOp getOp() { any() } } /** A conditional expression. */ diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/Sign.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/Sign.qll index b2058a27114..649b4216996 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/Sign.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/Sign.qll @@ -18,9 +18,9 @@ newtype TBinarySignOperation = TBitAndOp() or TBitOrOp() or TBitXorOp() or - TLShiftOp() or - TRShiftOp() or - TURShiftOp() + TLeftShiftOp() or + TRightShiftOp() or + TUnsignedRightShiftOp() /** Class representing expression signs (+, -, 0). */ class Sign extends TSign { @@ -271,10 +271,10 @@ class Sign extends TSign { or op = TBitXorOp() and result = bitxor(s) or - op = TLShiftOp() and result = lshift(s) + op = TLeftShiftOp() and result = lshift(s) or - op = TRShiftOp() and result = rshift(s) + op = TRightShiftOp() and result = rshift(s) or - op = TURShiftOp() and result = urshift(s) + op = TUnsignedRightShiftOp() and result = urshift(s) } } diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll index 9102bf29131..5b61ca54682 100644 --- a/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll +++ b/csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll @@ -211,8 +211,9 @@ private module Impl { not e.getExpr() instanceof BitwiseAndExpr and not e.getExpr() instanceof BitwiseOrExpr and not e.getExpr() instanceof BitwiseXorExpr and - not e.getExpr() instanceof LShiftExpr and - not e.getExpr() instanceof RShiftExpr and + not e.getExpr() instanceof LeftShiftExpr and + not e.getExpr() instanceof RightShiftExpr and + not e.getExpr() instanceof UnsignedRightShiftExpr and not e.getExpr() instanceof ConditionalExpr and not e.getExpr() instanceof RefExpr and not e.getExpr() instanceof LocalVariableDeclAndInitExpr and diff --git a/csharp/ql/lib/semmle/code/csharp/exprs/Assignment.qll b/csharp/ql/lib/semmle/code/csharp/exprs/Assignment.qll index 562a4dd9cd5..14da6da266f 100644 --- a/csharp/ql/lib/semmle/code/csharp/exprs/Assignment.qll +++ b/csharp/ql/lib/semmle/code/csharp/exprs/Assignment.qll @@ -150,8 +150,9 @@ class AssignRemExpr extends AssignArithmeticOperation, @assign_rem_expr { * operation (`AssignAndExpr`), a bitwise-or assignment * operation (`AssignOrExpr`), a bitwise exclusive-or assignment * operation (`AssignXorExpr`), a left-shift assignment - * operation (`AssignLShiftExpr`), or a right-shift assignment - * operation (`AssignRShiftExpr`). + * operation (`AssignLeftShiftExpr`), or a right-shift assignment + * operation (`AssignRightShiftExpr`), or an unsigned right-shift assignment + * operation (`AssignUnsignedRightShiftExpr`). */ class AssignBitwiseOperation extends AssignOperation, @assign_bitwise_expr { } @@ -185,19 +186,34 @@ class AssignXorExpr extends AssignBitwiseOperation, @assign_xor_expr { /** * A left-shift assignment operation, for example `x <<= y`. */ -class AssignLShiftExpr extends AssignBitwiseOperation, @assign_lshift_expr { +class AssignLeftShiftExpr extends AssignBitwiseOperation, @assign_lshift_expr { override string getOperator() { result = "<<=" } - override string getAPrimaryQlClass() { result = "AssignLShiftExpr" } + override string getAPrimaryQlClass() { result = "AssignLeftShiftExpr" } } +/** DEPRECATED: Alias for AssignLeftShipExpr. */ +deprecated class AssignLShiftExpr = AssignLeftShiftExpr; + /** * A right-shift assignment operation, for example `x >>= y`. */ -class AssignRShiftExpr extends AssignBitwiseOperation, @assign_rshift_expr { +class AssignRightShiftExpr extends AssignBitwiseOperation, @assign_rshift_expr { override string getOperator() { result = ">>=" } - override string getAPrimaryQlClass() { result = "AssignRShiftExpr" } + override string getAPrimaryQlClass() { result = "AssignRightShiftExpr" } +} + +/** DEPRECATED: Alias for AssignRightShiftExpr. */ +deprecated class AssignRShiftExpr = AssignRightShiftExpr; + +/** + * An unsigned right-shift assignment operation, for example `x >>>= y`. + */ +class AssignUnsighedRightShiftExpr extends AssignBitwiseOperation, @assign_urshift_expr { + override string getOperator() { result = ">>>=" } + + override string getAPrimaryQlClass() { result = "AssignUnsighedRightShiftExpr" } } /** diff --git a/csharp/ql/lib/semmle/code/csharp/exprs/BitwiseOperation.qll b/csharp/ql/lib/semmle/code/csharp/exprs/BitwiseOperation.qll index a23da710465..d32485a51f8 100644 --- a/csharp/ql/lib/semmle/code/csharp/exprs/BitwiseOperation.qll +++ b/csharp/ql/lib/semmle/code/csharp/exprs/BitwiseOperation.qll @@ -31,7 +31,8 @@ class ComplementExpr extends UnaryBitwiseOperation, @bit_not_expr { * A binary bitwise operation. Either a bitwise-and operation * (`BitwiseAndExpr`), a bitwise-or operation (`BitwiseOrExpr`), * a bitwise exclusive-or operation (`BitwiseXorExpr`), a left-shift - * operation (`LShiftExpr`), or a right-shift operation (`RShiftExpr`). + * operation (`LeftShiftExpr`), a right-shift operation (`RightShiftExpr`), + * or an unsigned right-shift operation (`UnsignedRightShiftExpr`). */ class BinaryBitwiseOperation extends BitwiseOperation, BinaryOperation, @bin_bit_op_expr { override string getOperator() { none() } @@ -40,19 +41,34 @@ class BinaryBitwiseOperation extends BitwiseOperation, BinaryOperation, @bin_bit /** * A left-shift operation, for example `x << y`. */ -class LShiftExpr extends BinaryBitwiseOperation, @lshift_expr { +class LeftShiftExpr extends BinaryBitwiseOperation, @lshift_expr { override string getOperator() { result = "<<" } - override string getAPrimaryQlClass() { result = "LShiftExpr" } + override string getAPrimaryQlClass() { result = "LeftShiftExpr" } } +/** DEPRECATED: Alias for LeftShiftExpr. */ +deprecated class LShiftExpr = LeftShiftExpr; + /** * A right-shift operation, for example `x >> y`. */ -class RShiftExpr extends BinaryBitwiseOperation, @rshift_expr { +class RightShiftExpr extends BinaryBitwiseOperation, @rshift_expr { override string getOperator() { result = ">>" } - override string getAPrimaryQlClass() { result = "RShiftExpr" } + override string getAPrimaryQlClass() { result = "RightShiftExpr" } +} + +/** DEPRECATED: Alias for RightShiftExpr. */ +deprecated class RShiftExpr = RightShiftExpr; + +/** + * An unsigned right-shift operation, for example `x >>> y`. + */ +class UnsignedRightShiftExpr extends BinaryBitwiseOperation, @urshift_expr { + override string getOperator() { result = ">>>" } + + override string getAPrimaryQlClass() { result = "UnsignedRightShiftExpr" } } /** diff --git a/csharp/ql/lib/semmlecode.csharp.dbscheme b/csharp/ql/lib/semmlecode.csharp.dbscheme index 83aca6b3e4f..1136957c0b3 100644 --- a/csharp/ql/lib/semmlecode.csharp.dbscheme +++ b/csharp/ql/lib/semmlecode.csharp.dbscheme @@ -670,7 +670,7 @@ compiler_generated(unique int id: @modifiable ref); @named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; -@virtualizable = @method | @property | @indexer | @event; +@virtualizable = @method | @property | @indexer | @event | @operator; exprorstmt_name( unique int parent_id: @named_exprorstmt ref, @@ -1137,6 +1137,8 @@ case @expr.kind of /* C# 11.0 */ | 131 = @list_pattern_expr | 132 = @slice_pattern_expr +| 133 = @urshift_expr +| 134 = @assign_urshift_expr /* Preprocessor */ | 999 = @define_symbol_expr ; @@ -1160,7 +1162,7 @@ case @expr.kind of @assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr | @assign_rem_expr @assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr - | @assign_lshift_expr | @assign_rshift_expr; + | @assign_lshift_expr | @assign_rshift_expr | @assign_urshift_expr; @member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; @@ -1191,7 +1193,7 @@ case @expr.kind of @log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; @bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr - | @rshift_expr; + | @rshift_expr | @urshift_expr; @un_bit_op_expr = @bit_not_expr; @bit_expr = @un_bit_op_expr | @bin_bit_op_expr; diff --git a/csharp/ql/lib/semmlecode.csharp.dbscheme.stats b/csharp/ql/lib/semmlecode.csharp.dbscheme.stats index 04516487ee9..b7c93de7353 100644 --- a/csharp/ql/lib/semmlecode.csharp.dbscheme.stats +++ b/csharp/ql/lib/semmlecode.csharp.dbscheme.stats @@ -17,12 +17,12 @@ 0 - @assembly - 14676 + @file + 106540 - @file - 106541 + @assembly + 14676 @folder @@ -30,35 +30,31 @@ @namespace - 500337 + 500332 @namespace_declaration - 42810 + 42809 @using_namespace_directive - 223779 + 223777 @using_static_directive 3484 - - @directive_if - 16750 - @directive_elif 275 - @directive_else - 5439 + @directive_if + 16749 - @location_default - 137912010 + @directive_else + 5439 @directive_endif @@ -92,6 +88,10 @@ @directive_undefine 55 + + @location_default + 137911541 + @directive_define 66 @@ -106,7 +106,7 @@ @typeref - 4815264 + 4815219 @bool_type @@ -162,23 +162,23 @@ @enum_type - 204056 + 204054 @struct_type - 1036578 + 1036568 @class_type - 5157996 + 5157948 @interface_type - 3246154 + 3246124 @delegate_type - 1214025 + 1214014 @null_type @@ -186,7 +186,7 @@ @type_parameter - 991372 + 991363 @pointer_type @@ -198,7 +198,7 @@ @array_type - 116793 + 116792 @void_type @@ -222,7 +222,7 @@ @tuple_type - 37858 + 37857 @function_pointer_type @@ -232,26 +232,26 @@ @uint_ptr_type 0 - - @type_mention - 2667838 - @attribute_default - 14361364 + 14361230 @attribute_return - 224363 + 224361 @attribute_assembly - 52426 + 52425 @attribute_module 53 + + @type_mention + 2667808 + @oblivious 21291 @@ -266,7 +266,7 @@ @type_parameter_constraints - 991372 + 991363 @modifier @@ -274,19 +274,19 @@ @property - 6642412 + 6642350 @indexer - 105719 + 105718 @getter - 6738210 + 6738147 @setter - 1177149 + 1177138 @event @@ -302,15 +302,15 @@ @operator - 629721 + 629715 @method - 20454980 + 20454789 @constructor - 5991233 + 5991176 @destructor @@ -322,15 +322,15 @@ @addressable_field - 11102837 + 11102733 @constant - 3873680 + 3873643 @addressable_local_variable - 497829 + 497825 @local_constant @@ -342,19 +342,19 @@ @parameter - 37386455 + 37386105 @block_stmt - 643009 + 643003 @expr_stmt - 698450 + 698444 @if_stmt - 299700 + 299697 @switch_stmt @@ -366,7 +366,7 @@ @do_stmt - 1916 + 1915 @for_stmt @@ -374,15 +374,15 @@ @foreach_stmt - 26826 + 26825 @break_stmt - 106776 + 106775 @continue_stmt - 8596 + 8595 @goto_stmt @@ -394,11 +394,11 @@ @throw_stmt - 157116 + 157106 @return_stmt - 301790 + 301787 @yield_stmt @@ -426,7 +426,7 @@ @var_decl_stmt - 449250 + 449246 @const_decl_stmt @@ -446,7 +446,7 @@ @case_stmt - 118515 + 118513 @goto_default_stmt @@ -466,19 +466,19 @@ @using_decl_stmt - 11564 + 11563 @bool_literal_expr - 472283 + 472278 @char_literal_expr - 61271 + 61270 @int_literal_expr - 3354291 + 3354259 @long_literal_expr @@ -490,27 +490,27 @@ @ulong_literal_expr - 3300 + 3299 @float_literal_expr - 109488 + 109487 @double_literal_expr - 54800 + 54799 @string_literal_expr - 2171269 + 2171248 @null_literal_expr - 215382 + 215366 @this_access_expr - 857625 + 857617 @base_access_expr @@ -518,19 +518,19 @@ @local_variable_access_expr - 1451844 + 1451830 @parameter_access_expr - 841262 + 841254 @field_access_expr - 1097227 + 1097217 @property_access_expr - 1242991 + 1242979 @method_access_expr @@ -550,15 +550,15 @@ @type_access_expr - 1243003 + 1242991 @typeof_expr - 597670 + 597664 @method_invocation_expr - 1078551 + 1078542 @delegate_invocation_expr @@ -566,15 +566,15 @@ @operator_invocation_expr - 596656 + 596650 @cast_expr - 781499 + 781491 @object_creation_expr - 202927 + 202926 @explicit_delegate_creation_expr @@ -586,11 +586,11 @@ @array_creation_expr - 565044 + 565039 @default_expr - 669657 + 669651 @minus_expr @@ -598,7 +598,7 @@ @log_not_expr - 60763 + 60762 @post_incr_expr @@ -618,7 +618,7 @@ @mul_expr - 9154 + 9153 @div_expr @@ -630,11 +630,11 @@ @add_expr - 72534 + 72533 @sub_expr - 25994 + 25993 @lshift_expr @@ -646,11 +646,11 @@ @lt_expr - 34251 + 34250 @gt_expr - 20968 + 20967 @le_expr @@ -658,15 +658,15 @@ @ge_expr - 12159 + 12158 @eq_expr - 135300 + 135298 @ne_expr - 117244 + 117243 @bit_and_expr @@ -682,7 +682,7 @@ @log_and_expr - 51646 + 51645 @log_or_expr @@ -690,7 +690,7 @@ @is_expr - 19997 + 19994 @as_expr @@ -702,11 +702,11 @@ @conditional_expr - 34750 + 34749 @simple_assign_expr - 1223633 + 1223622 @assign_add_expr @@ -726,7 +726,7 @@ @object_init_expr - 163090 + 163088 @collection_init_expr @@ -734,7 +734,7 @@ @array_init_expr - 564188 + 564183 @checked_expr @@ -746,7 +746,7 @@ @constructor_init_expr - 42947 + 42945 @add_event_expr @@ -758,11 +758,11 @@ @local_var_decl_expr - 499277 + 499273 @lambda_expr - 200792 + 200791 @anonymous_method_expr @@ -778,7 +778,7 @@ @nameof_expr - 50715 + 50714 @interpolated_string_expr @@ -794,15 +794,15 @@ @discard_expr - 30087 + 30086 @define_symbol_expr - 32513 + 32512 @decimal_literal_expr - 157044 + 157042 @plus_expr @@ -886,11 +886,11 @@ @recursive_pattern_expr - 3150 + 3146 @property_pattern_expr - 2543 + 2533 @positional_pattern_expr @@ -898,7 +898,7 @@ @switch_case_expr - 660643 + 660636 @assign_coalesce_expr @@ -906,7 +906,7 @@ @suppress_nullable_warning_expr - 25801 + 25799 @namespace_access_expr @@ -930,7 +930,7 @@ @not_pattern_expr - 2910 + 2909 @and_pattern_expr @@ -938,7 +938,7 @@ @or_pattern_expr - 2477 + 2476 @function_pointer_invocation_expr @@ -956,17 +956,25 @@ @slice_pattern_expr 18 + + @urshift_expr + 50 + + + @assign_urshift_expr + 2 + @xmldtd 58 @xmlelement - 60596893 + 60596686 @xmlattribute - 41517960 + 41517819 @xmlnamespace @@ -978,23 +986,23 @@ @xmlcharacters - 45379511 + 45379357 @singlelinecomment - 673827 + 673821 @xmldoccomment - 1226196 + 1226185 @multilinecomment - 82948 + 82947 @commentblock - 374970 + 374967 @asp_close_tag @@ -1022,7 +1030,7 @@ @asp_quoted_string - 47186 + 47185 @asp_text @@ -1034,15 +1042,15 @@ @cil_valueorreftype - 10427087 + 10426990 @cil_typeparameter - 1773609 + 1773592 @cil_array_type - 181790 + 181788 @cil_pointer_type @@ -1050,135 +1058,139 @@ @cil_function_pointer_type - 39912 + 39911 + + + @cil_method + 39373409 @cil_nop - 1327129 + 1327046 @cil_ldarg_0 - 53581819 + 53581318 @cil_ldarg_1 - 20969699 + 20969503 @cil_ldarg_2 - 7471514 + 7471444 @cil_ldarg_3 - 3234755 + 3234725 @cil_ldloc_0 - 17598601 + 17598436 @cil_ldloc_1 - 9495219 + 9495130 @cil_ldloc_2 - 6739302 + 6739239 @cil_ldloc_3 - 4230971 + 4230931 @cil_stloc_0 - 8735189 + 8735107 @cil_stloc_1 - 5003935 + 5003888 @cil_stloc_2 - 3618151 + 3618117 @cil_stloc_3 - 2480277 + 2480254 @cil_ldarg_s - 3414862 + 3414830 @cil_ldarga_s - 1248318 + 1248307 @cil_starg_s - 270382 + 270379 @cil_ldloc_s - 14457162 + 14457027 @cil_ldloca_s - 9786184 + 9786093 @cil_stloc_s - 9038705 + 9038620 @cil_ldnull - 5794381 + 5794327 @cil_ldc_i4_m1 - 871537 + 871529 @cil_ldc_i4_0 - 10862959 + 10862858 @cil_ldc_i4_1 - 8606701 + 8606621 @cil_ldc_i4_2 - 1948578 + 1948560 @cil_ldc_i4_3 - 1073526 + 1073516 @cil_ldc_i4_4 - 985880 + 985870 @cil_ldc_i4_5 - 578416 + 578411 @cil_ldc_i4_6 - 334080 + 334076 @cil_ldc_i4_7 - 296812 + 296809 @cil_ldc_i4_8 - 444583 + 444579 @cil_ldc_i4_s - 5378885 + 5378835 @cil_ldc_i4 - 2836653 + 2836626 @cil_ldc_i8 @@ -1186,23 +1198,23 @@ @cil_ldc_r4 - 31066 + 31065 @cil_ldc_r8 - 238341 + 238339 @cil_dup - 9272617 + 9272530 @cil_pop - 3880176 + 3880140 @cil_call - 48855176 + 48854719 @cil_calli @@ -1210,43 +1222,43 @@ @cil_ret - 31661234 + 31660937 @cil_br_s - 5776958 + 5776904 @cil_brfalse_s - 10010144 + 10010051 @cil_brtrue_s - 9349219 + 9349132 @cil_beq_s - 1588452 + 1588437 @cil_bge_s - 302364 + 302361 @cil_bgt_s - 237898 + 237896 @cil_ble_s - 342112 + 342109 @cil_blt_s - 581015 + 581009 @cil_bne_un_s - 2310181 + 2310159 @cil_bge_un_s @@ -1254,11 +1266,11 @@ @cil_bgt_un_s - 101083 + 101082 @cil_ble_un_s - 98691 + 98690 @cil_blt_un_s @@ -1266,23 +1278,23 @@ @cil_br - 1432176 + 1432163 @cil_brfalse - 953957 + 953948 @cil_brtrue - 803794 + 803786 @cil_beq - 420014 + 420010 @cil_bge - 34905 + 34904 @cil_bgt @@ -1294,11 +1306,11 @@ @cil_blt - 95206 + 95205 @cil_bne_un - 210730 + 210728 @cil_bge_un @@ -1318,7 +1330,7 @@ @cil_switch - 272685 + 272683 @cil_ldind_i1 @@ -1326,7 +1338,7 @@ @cil_ldind_u1 - 90068 + 90067 @cil_ldind_u2 @@ -1334,7 +1346,7 @@ @cil_ldind_i4 - 219353 + 219351 @cil_ldind_u4 @@ -1354,15 +1366,15 @@ @cil_ldind_ref - 190974 + 190972 @cil_stind_ref - 325516 + 325513 @cil_stind_i1 - 144847 + 144846 @cil_stind_i2 @@ -1370,7 +1382,7 @@ @cil_stind_i4 - 441482 + 441478 @cil_stind_i8 @@ -1386,19 +1398,19 @@ @cil_add - 2691805 + 2691780 @cil_sub - 1007112 + 1007103 @cil_mul - 426481 + 426477 @cil_div - 85048 + 85047 @cil_div_un @@ -1414,31 +1426,31 @@ @cil_and - 506036 + 506032 @cil_or - 225791 + 225789 @cil_xor - 192185 + 192183 @cil_shl - 118122 + 118121 @cil_shr - 60626 + 60625 @cil_shr_un - 114815 + 114814 @cil_neg - 29501 + 29500 @cil_not @@ -1454,11 +1466,11 @@ @cil_conv_i4 - 534002 + 533997 @cil_conv_i8 - 309038 + 309035 @cil_conv_r4 @@ -1474,11 +1486,11 @@ @cil_conv_u8 - 142987 + 142985 @cil_callvirt - 41217611 + 41217225 @cil_cpobj @@ -1486,23 +1498,23 @@ @cil_ldobj - 163865 + 163863 @cil_ldstr - 11254978 + 11254873 @cil_newobj - 12728409 + 12728290 @cil_castclass - 1803967 + 1803950 @cil_isinst - 2744724 + 2744698 @cil_conv_r_un @@ -1514,23 +1526,23 @@ @cil_throw - 1827943 + 1827881 @cil_ldfld - 23008966 + 23008751 @cil_ldflda - 1951443 + 1951424 @cil_stfld - 11363976 + 11363870 @cil_ldsfld - 10513996 + 10513898 @cil_ldsflda @@ -1538,7 +1550,7 @@ @cil_stsfld - 2599167 + 2599143 @cil_stobj @@ -1546,19 +1558,19 @@ @cil_box - 1419832 + 1419819 @cil_newarr - 1603690 + 1603675 @cil_ldlen - 570295 + 570290 @cil_ldelema - 714434 + 714427 @cil_ldelem_i1 @@ -1566,7 +1578,7 @@ @cil_ldelem_u1 - 104863 + 104862 @cil_ldelem_i2 @@ -1578,15 +1590,15 @@ @cil_ldelem_i4 - 158254 + 158253 @cil_ldelem_u4 - 130732 + 130730 @cil_ldelem_i8 - 64583 + 64582 @cil_ldelem_i @@ -1602,7 +1614,7 @@ @cil_ldelem_ref - 344799 + 344796 @cil_stelem_i @@ -1610,7 +1622,7 @@ @cil_stelem_i1 - 75244 + 75243 @cil_stelem_i2 @@ -1618,11 +1630,11 @@ @cil_stelem_i4 - 173108 + 173106 @cil_stelem_i8 - 31007 + 31006 @cil_stelem_r8 @@ -1630,19 +1642,19 @@ @cil_stelem_ref - 4221551 + 4221511 @cil_ldelem - 35909 + 35908 @cil_stelem - 208190 + 208188 @cil_unbox_any - 227651 + 227649 @cil_conv_ovf_u1 @@ -1658,7 +1670,7 @@ @cil_ldtoken - 1020371 + 1020362 @cil_conv_u2 @@ -1666,11 +1678,11 @@ @cil_conv_u1 - 238253 + 238250 @cil_conv_i - 34285 + 34284 @cil_conv_ovf_i @@ -1690,15 +1702,15 @@ @cil_endfinally - 1967891 + 1967873 @cil_leave - 692729 + 692723 @cil_leave_s - 3134203 + 3134174 @cil_stind_i @@ -1706,11 +1718,11 @@ @cil_conv_u - 114135 + 114134 @cil_ceq - 930037 + 930028 @cil_cgt @@ -1718,11 +1730,11 @@ @cil_cgt_un - 355253 + 355250 @cil_clt - 75775 + 75774 @cil_clt_un @@ -1730,7 +1742,7 @@ @cil_ldftn - 2883016 + 2882989 @cil_ldvirtftn @@ -1762,15 +1774,15 @@ @cil_volatile - 55222 + 55221 @cil_initobj - 950709 + 950700 @cil_constrained - 758376 + 758368 @cil_cpblk @@ -1782,7 +1794,7 @@ @cil_rethrow - 72025 + 72024 @cil_sizeof @@ -1914,7 +1926,7 @@ @cil_ldloca - 78758 + 78757 @cil_tail @@ -1924,37 +1936,33 @@ @cil_refanytype 13 - - @cil_method - 39373777 - @cil_method_implementation - 27073001 + 27072747 @cil_field - 15899467 + 15899318 @cil_parameter - 75119038 - - - @cil_property - 6002749 + 75118336 @cil_event - 70696 + 70695 + + + @cil_property + 6002693 @cil_local_variable - 23026507 + 23026292 @cil_catch_handler - 400819 + 400815 @cil_filter_handler @@ -1962,15 +1970,15 @@ @cil_finally_handler - 1662456 + 1662440 @cil_fault_handler - 305435 + 305432 @cil_attribute - 5874527 + 5874473 @@ -2320,7 +2328,7 @@ compilation_compiling_files - 49881 + 49880 id @@ -2640,7 +2648,7 @@ 1 2 - 49836 + 49835 2 @@ -2661,7 +2669,7 @@ 1 2 - 49836 + 49835 2 @@ -2676,7 +2684,7 @@ compilation_referencing_files - 719519 + 719512 id @@ -2910,57 +2918,62 @@ 1 5 - 630 + 574 5 6 - 1159 + 1148 6 7 - 900 + 957 7 - 22 + 21 + 540 + + + 21 + 27 574 - 22 - 28 - 574 + 27 + 32 + 540 - 28 - 35 - 517 - - - 35 + 32 42 529 - 42 - 58 + 43 + 59 551 - 58 - 67 - 608 + 59 + 66 + 495 - 67 - 70 + 66 + 69 + 506 + + + 69 + 73 585 - 70 - 77 - 416 + 73 + 82 + 45 @@ -3037,62 +3050,62 @@ 2 5 - 585 + 562 5 6 - 630 + 495 6 7 - 641 + 788 7 - 10 + 9 + 596 + + + 9 + 19 675 - 10 - 20 - 686 - - - 20 - 28 - 675 - - - 28 - 35 - 619 - - - 35 - 51 + 19 + 25 574 - 51 - 68 - 439 + 25 + 32 + 596 - 68 - 70 - 484 + 32 + 38 + 608 - 70 + 38 + 67 + 517 + + + 67 + 69 + 517 + + + 69 72 - 574 + 630 72 - 78 - 304 + 77 + 326 @@ -3118,7 +3131,7 @@ seconds - 11226 + 11530 @@ -3164,12 +3177,12 @@ 6 7 - 11 + 22 7 8 - 2206 + 2195 @@ -3215,8 +3228,8 @@ 12 - 997 - 998 + 1024 + 1025 11 @@ -3263,19 +3276,24 @@ 12 - 138 - 139 + 143 + 144 11 - 144 - 145 + 146 + 147 11 - 152 - 153 - 22 + 155 + 156 + 11 + + + 157 + 158 + 11 197 @@ -3296,7 +3314,7 @@ 1 2 - 9007 + 9345 2 @@ -3306,12 +3324,12 @@ 3 5 - 945 + 1035 5 - 10 - 247 + 8 + 123 @@ -3327,7 +3345,7 @@ 1 2 - 11226 + 11530 @@ -3343,17 +3361,17 @@ 1 2 - 9570 + 9874 2 3 - 1328 + 1429 3 5 - 326 + 225 @@ -4412,7 +4430,7 @@ 1 2 - 31693 + 31692 2 @@ -4481,7 +4499,7 @@ 1 2 - 31693 + 31692 2 @@ -4539,7 +4557,7 @@ 1 2 - 40646 + 40645 2 @@ -4560,7 +4578,7 @@ 1 2 - 40646 + 40645 2 @@ -4581,7 +4599,7 @@ 1 2 - 40646 + 40645 2 @@ -5357,7 +5375,7 @@ cpu_seconds - 1936 + 2060 elapsed_seconds @@ -5407,17 +5425,12 @@ 1 2 - 1666 + 1925 2 - 3 - 258 - - - 3 4 - 11 + 135 @@ -5433,17 +5446,12 @@ 1 2 - 1666 + 1925 2 - 3 - 258 - - - 3 4 - 11 + 135 @@ -5688,19 +5696,19 @@ locations_default - 137912010 + 137911541 id - 137912010 + 137911541 file - 73412 + 73411 beginLine - 328702 + 328701 beginColumn @@ -5708,7 +5716,7 @@ endLine - 331303 + 331302 endColumn @@ -5726,7 +5734,7 @@ 1 2 - 137912010 + 137911541 @@ -5742,7 +5750,7 @@ 1 2 - 137912010 + 137911541 @@ -5758,7 +5766,7 @@ 1 2 - 137912010 + 137911541 @@ -5774,7 +5782,7 @@ 1 2 - 137912010 + 137911541 @@ -5790,7 +5798,7 @@ 1 2 - 137912010 + 137911541 @@ -5963,7 +5971,7 @@ 1 6 - 5045 + 5044 6 @@ -6099,7 +6107,7 @@ 2417 135652 - 5197 + 5196 @@ -6196,7 +6204,7 @@ 4 5 - 21425 + 21424 5 @@ -6520,7 +6528,7 @@ 57 78 - 24880 + 24879 78 @@ -6953,7 +6961,7 @@ 2 3 - 76464 + 76463 3 @@ -7151,7 +7159,7 @@ 1 2 - 10090 + 10089 2 @@ -7345,15 +7353,15 @@ locations_mapped - 135223 + 135221 id - 135223 + 135221 mapped_to - 83194 + 83193 @@ -7367,7 +7375,7 @@ 1 2 - 135223 + 135221 @@ -7383,7 +7391,7 @@ 1 2 - 31212 + 31211 2 @@ -7403,11 +7411,11 @@ numlines - 60897147 + 60896940 element_id - 60897038 + 60896831 num_lines @@ -7433,7 +7441,7 @@ 1 2 - 60896930 + 60896723 2 @@ -7454,7 +7462,7 @@ 1 2 - 60896932 + 60896725 2 @@ -7475,7 +7483,7 @@ 1 2 - 60897026 + 60896819 2 @@ -8076,7 +8084,7 @@ 1 2 - 14588 + 14587 3 @@ -8097,7 +8105,7 @@ 1 2 - 14588 + 14587 3 @@ -8150,7 +8158,7 @@ 1 2 - 14588 + 14587 3 @@ -8171,7 +8179,7 @@ 1 2 - 14588 + 14587 3 @@ -8382,15 +8390,15 @@ files - 106541 + 106540 id - 106541 + 106540 name - 106541 + 106540 @@ -8404,7 +8412,7 @@ 1 2 - 106541 + 106540 @@ -8420,7 +8428,7 @@ 1 2 - 106541 + 106540 @@ -8478,7 +8486,7 @@ containerparent - 143755 + 143753 parent @@ -8486,7 +8494,7 @@ child - 143755 + 143753 @@ -8546,7 +8554,7 @@ 1 2 - 143755 + 143753 @@ -8604,15 +8612,15 @@ namespaces - 500337 + 500332 id - 500337 + 500332 name - 86288 + 86287 @@ -8626,7 +8634,7 @@ 1 2 - 500337 + 500332 @@ -8647,7 +8655,7 @@ 2 3 - 52830 + 52829 3 @@ -8692,11 +8700,11 @@ namespace_declarations - 42810 + 42809 id - 42810 + 42809 namespace_id @@ -8714,7 +8722,7 @@ 1 2 - 42810 + 42809 @@ -8775,15 +8783,15 @@ namespace_declaration_location - 42810 + 42809 id - 42810 + 42809 loc - 42810 + 42809 @@ -8797,7 +8805,7 @@ 1 2 - 42810 + 42809 @@ -8813,7 +8821,7 @@ 1 2 - 42810 + 42809 @@ -8823,15 +8831,15 @@ parent_namespace - 9856437 + 9856345 child_id - 9856437 + 9856345 namespace_id - 314826 + 314823 @@ -8845,7 +8853,7 @@ 1 2 - 9856437 + 9856345 @@ -8861,12 +8869,12 @@ 1 2 - 81977 + 81976 2 3 - 44857 + 44856 3 @@ -8876,7 +8884,7 @@ 4 5 - 21321 + 21320 5 @@ -8891,7 +8899,7 @@ 8 12 - 28556 + 28555 12 @@ -8901,7 +8909,7 @@ 19 44 - 23831 + 23830 44 @@ -8938,7 +8946,7 @@ 1 2 - 53097 + 53096 2 @@ -8995,11 +9003,11 @@ using_namespace_directives - 223779 + 223777 id - 223779 + 223777 namespace_id @@ -9017,7 +9025,7 @@ 1 2 - 223779 + 223777 @@ -9136,15 +9144,15 @@ using_directive_location - 223959 + 223957 id - 223959 + 223957 loc - 223846 + 223844 @@ -9158,7 +9166,7 @@ 1 2 - 223959 + 223957 @@ -9174,7 +9182,7 @@ 1 2 - 223734 + 223732 2 @@ -9189,11 +9197,11 @@ directive_ifs - 16750 + 16749 id - 16750 + 16749 branchTaken @@ -9215,7 +9223,7 @@ 1 2 - 16750 + 16749 @@ -9231,7 +9239,7 @@ 1 2 - 16750 + 16749 @@ -10057,7 +10065,7 @@ start - 16750 + 16749 @@ -10087,7 +10095,7 @@ 1 2 - 16750 + 16749 @@ -10097,11 +10105,11 @@ directive_define_symbols - 32513 + 32512 id - 32513 + 32512 name @@ -10119,7 +10127,7 @@ 1 2 - 32513 + 32512 @@ -11632,15 +11640,15 @@ preprocessor_directive_location - 79638 + 79637 id - 79638 + 79637 loc - 79638 + 79637 @@ -11654,7 +11662,7 @@ 1 2 - 79638 + 79637 @@ -11670,7 +11678,7 @@ 1 2 - 79638 + 79637 @@ -11680,11 +11688,11 @@ preprocessor_directive_compilation - 79638 + 79637 id - 79638 + 79637 compilation @@ -11702,7 +11710,7 @@ 1 2 - 79638 + 79637 @@ -11753,11 +11761,11 @@ preprocessor_directive_active - 79638 + 79637 id - 79638 + 79637 active @@ -11775,7 +11783,7 @@ 1 2 - 79638 + 79637 @@ -11806,11 +11814,11 @@ types - 11520193 + 11520085 id - 11520193 + 11520085 kind @@ -11818,7 +11826,7 @@ name - 3497046 + 3497013 @@ -11832,7 +11840,7 @@ 1 2 - 11520193 + 11520085 @@ -11848,7 +11856,7 @@ 1 2 - 11520193 + 11520085 @@ -11951,17 +11959,17 @@ 1 2 - 3141586 + 3141557 2 5 - 274812 + 274809 5 21597 - 80648 + 80647 @@ -11977,7 +11985,7 @@ 1 2 - 3468460 + 3468428 2 @@ -11992,15 +12000,15 @@ typerefs - 4815264 + 4815219 id - 4815264 + 4815219 name - 3370389 + 3370358 @@ -12014,7 +12022,7 @@ 1 2 - 4815264 + 4815219 @@ -12030,12 +12038,12 @@ 1 2 - 3128415 + 3128386 2 11806 - 241973 + 241971 @@ -12045,15 +12053,15 @@ typeref_type - 4775132 + 4775087 id - 4775132 + 4775087 typeId - 4775132 + 4775087 @@ -12067,7 +12075,7 @@ 1 2 - 4775132 + 4775087 @@ -12083,7 +12091,7 @@ 1 2 - 4775132 + 4775087 @@ -12093,11 +12101,11 @@ array_element_type - 116793 + 116792 array - 116793 + 116792 dimension @@ -12109,7 +12117,7 @@ element - 116409 + 116408 @@ -12123,7 +12131,7 @@ 1 2 - 116793 + 116792 @@ -12139,7 +12147,7 @@ 1 2 - 116793 + 116792 @@ -12155,7 +12163,7 @@ 1 2 - 116793 + 116792 @@ -12317,7 +12325,7 @@ 1 2 - 116084 + 116083 2 @@ -12338,7 +12346,7 @@ 1 2 - 116409 + 116408 @@ -12354,7 +12362,7 @@ 1 2 - 116084 + 116083 2 @@ -12465,11 +12473,11 @@ enum_underlying_type - 204056 + 204054 enum_id - 204056 + 204054 underlying_type_id @@ -12487,7 +12495,7 @@ 1 2 - 204056 + 204054 @@ -12548,15 +12556,15 @@ delegate_return_type - 1214025 + 1214014 delegate_id - 1214025 + 1214014 return_type_id - 609581 + 609575 @@ -12570,7 +12578,7 @@ 1 2 - 1214025 + 1214014 @@ -12586,12 +12594,12 @@ 1 2 - 578365 + 578359 2 2134 - 31216 + 31215 @@ -12669,15 +12677,15 @@ extend - 3912749 + 3912712 sub - 3912749 + 3912712 super - 608567 + 608561 @@ -12691,7 +12699,7 @@ 1 2 - 3912749 + 3912712 @@ -12707,12 +12715,12 @@ 1 2 - 412779 + 412775 2 3 - 97451 + 97450 3 @@ -12722,12 +12730,12 @@ 5 107 - 45654 + 45653 107 31892 - 1447 + 1446 @@ -12748,15 +12756,15 @@ implement - 12929395 + 12929274 sub - 4515705 + 4515663 super - 2758958 + 2758932 @@ -12770,32 +12778,32 @@ 1 2 - 1532610 + 1532595 2 3 - 1232578 + 1232567 3 4 - 844694 + 844686 4 6 - 367567 + 367564 6 9 - 339011 + 339008 9 32 - 199243 + 199241 @@ -12811,27 +12819,27 @@ 1 2 - 1324507 + 1324495 2 3 - 815340 + 815333 3 5 - 236392 + 236390 5 6 - 215396 + 215394 6 90747 - 167320 + 167318 @@ -12841,11 +12849,11 @@ type_location - 6161742 + 6161685 id - 6071408 + 6071351 loc @@ -12863,7 +12871,7 @@ 1 2 - 6041080 + 6041024 2 @@ -12944,15 +12952,15 @@ tuple_underlying_type - 37858 + 37857 tuple - 37858 + 37857 struct - 37858 + 37857 @@ -12966,7 +12974,7 @@ 1 2 - 37858 + 37857 @@ -12982,7 +12990,7 @@ 1 2 - 37858 + 37857 @@ -12992,7 +13000,7 @@ tuple_element - 99961 + 99960 tuple @@ -13004,7 +13012,7 @@ field - 99961 + 99960 @@ -13322,7 +13330,7 @@ 1 2 - 99961 + 99960 @@ -13338,7 +13346,7 @@ 1 2 - 99961 + 99960 @@ -13348,11 +13356,11 @@ attributes - 14554229 + 14554093 id - 14554229 + 14554093 kind @@ -13364,7 +13372,7 @@ target - 12720347 + 12720228 @@ -13378,7 +13386,7 @@ 1 2 - 14554229 + 14554093 @@ -13394,7 +13402,7 @@ 1 2 - 14554229 + 14554093 @@ -13410,7 +13418,7 @@ 1 2 - 14554229 + 14554093 @@ -13534,7 +13542,7 @@ 14 23 - 1447 + 1446 23 @@ -13544,7 +13552,7 @@ 40 86 - 1447 + 1446 88 @@ -13651,7 +13659,7 @@ 152 380 - 1447 + 1446 385 @@ -13677,12 +13685,12 @@ 1 2 - 11789749 + 11789638 2 3520 - 930598 + 930589 @@ -13698,7 +13706,7 @@ 1 2 - 12664594 + 12664475 2 @@ -13719,12 +13727,12 @@ 1 2 - 11960465 + 11960353 2 29 - 759882 + 759875 @@ -13734,11 +13742,11 @@ attribute_location - 14556089 + 14555953 id - 14554229 + 14554093 loc @@ -13756,7 +13764,7 @@ 1 2 - 14552752 + 14552616 2 @@ -13847,19 +13855,19 @@ type_mention - 2667838 + 2667808 id - 2667838 + 2667808 type_id - 76163 + 76156 parent - 2110780 + 2110766 @@ -13873,7 +13881,7 @@ 1 2 - 2667838 + 2667808 @@ -13889,7 +13897,7 @@ 1 2 - 2667838 + 2667808 @@ -13905,17 +13913,17 @@ 1 2 - 13028 + 13027 2 3 - 14823 + 14820 3 4 - 8378 + 8377 4 @@ -13930,7 +13938,7 @@ 6 7 - 5252 + 5251 7 @@ -13945,17 +13953,17 @@ 16 36 - 5803 + 5802 36 - 760 - 5714 + 758 + 5711 - 762 + 759 97094 - 360 + 362 @@ -13971,12 +13979,12 @@ 1 2 - 23361 + 23359 2 3 - 12267 + 12264 3 @@ -13986,7 +13994,7 @@ 4 5 - 6013 + 6012 5 @@ -14001,7 +14009,7 @@ 8 13 - 5964 + 5963 13 @@ -14010,13 +14018,13 @@ 30 - 609 - 5714 + 607 + 5711 - 612 - 73794 - 383 + 608 + 73798 + 385 @@ -14032,17 +14040,17 @@ 1 2 - 1801358 + 1801339 2 3 - 219426 + 219408 3 613 - 89995 + 90019 @@ -14058,12 +14066,12 @@ 1 2 - 2067454 + 2067445 2 38 - 43325 + 43320 @@ -14073,15 +14081,15 @@ type_mention_location - 2667838 + 2667808 id - 2667838 + 2667808 loc - 2358635 + 2358655 @@ -14095,7 +14103,7 @@ 1 2 - 2667838 + 2667808 @@ -14111,12 +14119,12 @@ 1 2 - 2217587 + 2217592 2 205 - 141048 + 141062 @@ -14126,11 +14134,11 @@ type_annotation - 1259639 + 1259627 id - 1259639 + 1259627 annotation @@ -14148,7 +14156,7 @@ 1 2 - 1259639 + 1259627 @@ -14543,15 +14551,15 @@ type_nullability - 44405235 + 44404820 id - 44402076 + 44401660 nullability - 28113 + 28112 @@ -14565,7 +14573,7 @@ 1 2 - 44399034 + 44398619 2 @@ -14586,7 +14594,7 @@ 1 2 - 10129 + 10128 2 @@ -14596,7 +14604,7 @@ 3 4 - 2894 + 2893 4 @@ -14636,11 +14644,11 @@ expr_flowstate - 5429110 + 5429197 id - 5429110 + 5429197 state @@ -14658,7 +14666,7 @@ 1 2 - 5429110 + 5429197 @@ -14672,13 +14680,13 @@ 12 - 223701 - 223702 + 223736 + 223737 2 - 2337771 - 2337772 + 2337938 + 2337939 2 @@ -14689,11 +14697,11 @@ type_parameters - 991372 + 991363 id - 991372 + 991363 index @@ -14701,7 +14709,7 @@ generic_id - 758317 + 758309 variance @@ -14719,7 +14727,7 @@ 1 2 - 991372 + 991363 @@ -14735,7 +14743,7 @@ 1 2 - 991372 + 991363 @@ -14751,7 +14759,7 @@ 1 2 - 991372 + 991363 @@ -14915,12 +14923,12 @@ 1 2 - 592797 + 592792 2 3 - 137258 + 137257 3 @@ -14941,12 +14949,12 @@ 1 2 - 592797 + 592792 2 3 - 137258 + 137257 3 @@ -14967,7 +14975,7 @@ 1 2 - 757135 + 757128 2 @@ -15060,11 +15068,11 @@ type_arguments - 24843956 + 24843724 id - 789924 + 789917 index @@ -15072,7 +15080,7 @@ constructed_id - 2591723 + 2591698 @@ -15086,17 +15094,17 @@ 1 2 - 216091 + 216089 2 3 - 548605 + 548600 3 8 - 25228 + 25227 @@ -15112,22 +15120,22 @@ 1 2 - 82752 + 82751 2 3 - 587919 + 587914 3 10 - 61303 + 61302 10 3477 - 57949 + 57948 @@ -15325,37 +15333,37 @@ 1 2 - 408050 + 408047 2 3 - 1236259 + 1236248 3 19 - 213081 + 213079 19 24 - 198798 + 198796 24 28 - 230194 + 230192 28 31 - 221032 + 221030 31 33 - 84306 + 84305 @@ -15371,37 +15379,37 @@ 1 2 - 403306 + 403302 2 3 - 1238582 + 1238571 3 19 - 215502 + 215500 19 24 - 198798 + 198796 24 28 - 230194 + 230192 28 31 - 221032 + 221030 31 33 - 84306 + 84305 @@ -15411,15 +15419,15 @@ constructed_generic - 5258135 + 5258085 constructed - 5258135 + 5258085 generic - 108318 + 108317 @@ -15433,7 +15441,7 @@ 1 2 - 5258135 + 5258085 @@ -15459,7 +15467,7 @@ 3 4 - 10631 + 10630 4 @@ -15489,7 +15497,7 @@ 149 19826 - 3396 + 3395 @@ -15499,15 +15507,15 @@ type_parameter_constraints - 991372 + 991363 id - 991372 + 991363 param_id - 991372 + 991363 @@ -15521,7 +15529,7 @@ 1 2 - 991372 + 991363 @@ -15537,7 +15545,7 @@ 1 2 - 991372 + 991363 @@ -15583,11 +15591,11 @@ general_type_parameter_constraints - 283258 + 283256 id - 282033 + 282031 kind @@ -15605,7 +15613,7 @@ 1 2 - 280808 + 280806 2 @@ -15656,11 +15664,11 @@ specific_type_parameter_constraints - 302127 + 302125 id - 295217 + 295214 base_id @@ -15678,7 +15686,7 @@ 1 2 - 290167 + 290165 2 @@ -15699,7 +15707,7 @@ 1 2 - 24776 + 24775 2 @@ -15739,7 +15747,7 @@ specific_type_parameter_nullability - 35626 + 35625 id @@ -16126,11 +16134,11 @@ has_modifiers - 100736682 + 100735739 id - 66663238 + 66662615 mod_id @@ -16148,17 +16156,17 @@ 1 2 - 34234237 + 34233917 2 3 - 30788810 + 30788522 3 5 - 1640190 + 1640174 @@ -16249,11 +16257,11 @@ compiler_generated - 1278339 + 1278327 id - 1278339 + 1278327 @@ -16348,19 +16356,19 @@ nested_types - 2161819 + 2161798 id - 2161819 + 2161798 declaring_type_id - 867580 + 867572 unbound_id - 1812914 + 1812897 @@ -16374,7 +16382,7 @@ 1 2 - 2161819 + 2161798 @@ -16390,7 +16398,7 @@ 1 2 - 2161819 + 2161798 @@ -16406,12 +16414,12 @@ 1 2 - 507720 + 507715 2 3 - 151344 + 151343 3 @@ -16447,27 +16455,27 @@ 1 2 - 509816 + 509812 2 3 - 152023 + 152022 3 4 - 71848 + 71847 4 6 - 65587 + 65586 6 26 - 65085 + 65084 26 @@ -16488,12 +16496,12 @@ 1 2 - 1746795 + 1746779 2 490 - 66119 + 66118 @@ -16509,7 +16517,7 @@ 1 2 - 1757397 + 1757380 2 @@ -16524,27 +16532,27 @@ properties - 6642412 + 6642350 id - 6642412 + 6642350 name - 1540642 + 1540628 declaring_type_id - 1854464 + 1854447 type_id - 737232 + 737225 unbound_id - 5942802 + 5942747 @@ -16558,7 +16566,7 @@ 1 2 - 6642412 + 6642350 @@ -16574,7 +16582,7 @@ 1 2 - 6642412 + 6642350 @@ -16590,7 +16598,7 @@ 1 2 - 6642412 + 6642350 @@ -16606,7 +16614,7 @@ 1 2 - 6642412 + 6642350 @@ -16622,27 +16630,27 @@ 1 2 - 972266 + 972257 2 3 - 248204 + 248202 3 4 - 95265 + 95264 4 8 - 124087 + 124086 8 8341 - 100817 + 100816 @@ -16658,27 +16666,27 @@ 1 2 - 972266 + 972257 2 3 - 248559 + 248556 3 4 - 95118 + 95117 4 8 - 124412 + 124411 8 4889 - 100286 + 100285 @@ -16694,12 +16702,12 @@ 1 2 - 1346951 + 1346938 2 3 - 111448 + 111447 3 @@ -16720,12 +16728,12 @@ 1 2 - 980741 + 980732 2 3 - 254051 + 254049 3 @@ -16735,12 +16743,12 @@ 4 8 - 120130 + 120129 8 7118 - 90275 + 90274 @@ -16756,37 +16764,37 @@ 1 2 - 660127 + 660121 2 3 - 435281 + 435277 3 4 - 247023 + 247021 4 5 - 156837 + 156835 5 7 - 156010 + 156008 7 14 - 142130 + 142129 14 2090 - 57053 + 57052 @@ -16802,37 +16810,37 @@ 1 2 - 762392 + 762385 2 3 - 334641 + 334637 3 4 - 247407 + 247405 4 5 - 159435 + 159434 5 7 - 155951 + 155949 7 14 - 139916 + 139914 14 2090 - 54720 + 54719 @@ -16848,27 +16856,27 @@ 1 2 - 764990 + 764983 2 3 - 530281 + 530276 3 4 - 228389 + 228387 4 5 - 122552 + 122550 5 9 - 154563 + 154561 9 @@ -16889,37 +16897,37 @@ 1 2 - 660127 + 660121 2 3 - 435281 + 435277 3 4 - 247023 + 247021 4 5 - 156837 + 156835 5 7 - 156010 + 156008 7 14 - 142130 + 142129 14 2090 - 57053 + 57052 @@ -16935,17 +16943,17 @@ 1 2 - 402738 + 402734 2 3 - 152023 + 152022 3 4 - 49375 + 49374 4 @@ -16955,7 +16963,7 @@ 7 32 - 55340 + 55339 32 @@ -16976,12 +16984,12 @@ 1 2 - 589136 + 589130 2 3 - 82449 + 82448 3 @@ -17007,12 +17015,12 @@ 1 2 - 421756 + 421752 2 3 - 145733 + 145732 3 @@ -17027,7 +17035,7 @@ 7 51 - 55399 + 55398 51 @@ -17048,12 +17056,12 @@ 1 2 - 404923 + 404920 2 3 - 154268 + 154266 3 @@ -17063,12 +17071,12 @@ 4 7 - 62575 + 62574 7 40 - 55399 + 55398 40 @@ -17089,12 +17097,12 @@ 1 2 - 5841365 + 5841310 2 1206 - 101437 + 101436 @@ -17110,7 +17118,7 @@ 1 2 - 5942802 + 5942747 @@ -17126,12 +17134,12 @@ 1 2 - 5841365 + 5841310 2 1206 - 101437 + 101436 @@ -17147,12 +17155,12 @@ 1 2 - 5921038 + 5920983 2 1206 - 21764 + 21763 @@ -17162,15 +17170,15 @@ property_location - 6657089 + 6657027 id - 6642412 + 6642350 loc - 10926 + 10955 @@ -17184,7 +17192,7 @@ 1 2 - 6631840 + 6631778 2 @@ -17205,7 +17213,7 @@ 1 5 - 885 + 915 5 @@ -17280,11 +17288,11 @@ indexers - 105719 + 105718 id - 105719 + 105718 name @@ -17292,7 +17300,7 @@ declaring_type_id - 92814 + 92813 type_id @@ -17314,7 +17322,7 @@ 1 2 - 105719 + 105718 @@ -17330,7 +17338,7 @@ 1 2 - 105719 + 105718 @@ -17346,7 +17354,7 @@ 1 2 - 105719 + 105718 @@ -17362,7 +17370,7 @@ 1 2 - 105719 + 105718 @@ -17563,7 +17571,7 @@ 1 2 - 92726 + 92725 2 @@ -17584,7 +17592,7 @@ 1 2 - 86731 + 86730 2 @@ -17688,7 +17696,7 @@ 1 2 - 14027 + 14026 2 @@ -17818,7 +17826,7 @@ 1 2 - 35968 + 35967 2 @@ -17833,11 +17841,11 @@ indexer_location - 106044 + 106043 id - 105719 + 105718 loc @@ -17855,7 +17863,7 @@ 1 2 - 105394 + 105393 2 @@ -17926,11 +17934,11 @@ accessors - 7915360 + 7915286 id - 7915360 + 7915286 kind @@ -17938,15 +17946,15 @@ name - 2102196 + 2102177 declaring_member_id - 6746921 + 6746858 unbound_id - 7039570 + 7039504 @@ -17960,7 +17968,7 @@ 1 2 - 7915360 + 7915286 @@ -17976,7 +17984,7 @@ 1 2 - 7915360 + 7915286 @@ -17992,7 +18000,7 @@ 1 2 - 7915360 + 7915286 @@ -18008,7 +18016,7 @@ 1 2 - 7915360 + 7915286 @@ -18108,27 +18116,27 @@ 1 2 - 1367179 + 1367166 2 3 - 330831 + 330828 3 5 - 191653 + 191651 5 17 - 160587 + 160586 17 3385 - 51944 + 51943 @@ -18144,7 +18152,7 @@ 1 2 - 2102196 + 2102177 @@ -18160,27 +18168,27 @@ 1 2 - 1367179 + 1367166 2 3 - 330831 + 330828 3 5 - 191653 + 191651 5 17 - 160587 + 160586 17 3385 - 51944 + 51943 @@ -18196,22 +18204,22 @@ 1 2 - 1382003 + 1381990 2 3 - 339690 + 339687 3 5 - 189616 + 189614 5 24 - 158786 + 158784 24 @@ -18232,12 +18240,12 @@ 1 2 - 5578483 + 5578431 2 3 - 1168438 + 1168427 @@ -18253,12 +18261,12 @@ 1 2 - 5578483 + 5578431 2 3 - 1168438 + 1168427 @@ -18274,12 +18282,12 @@ 1 2 - 5578483 + 5578431 2 3 - 1168438 + 1168427 @@ -18295,12 +18303,12 @@ 1 2 - 5578483 + 5578431 2 3 - 1168438 + 1168427 @@ -18316,12 +18324,12 @@ 1 2 - 6919853 + 6919788 2 1206 - 119717 + 119716 @@ -18337,7 +18345,7 @@ 1 2 - 7039570 + 7039504 @@ -18353,7 +18361,7 @@ 1 2 - 7039570 + 7039504 @@ -18369,12 +18377,12 @@ 1 2 - 6919853 + 6919788 2 1206 - 119717 + 119716 @@ -18395,15 +18403,15 @@ accessor_location - 7933078 + 7933004 id - 7915360 + 7915286 loc - 10926 + 10955 @@ -18417,7 +18425,7 @@ 1 2 - 7901923 + 7901849 2 @@ -18438,67 +18446,67 @@ 1 6 - 885 + 944 6 - 12 + 13 + 974 + + + 13 + 26 + 856 + + + 26 + 43 826 - 12 - 22 + 44 + 68 826 - 22 - 38 - 885 - - - 38 - 66 - 915 - - - 67 - 105 + 68 + 106 826 - 105 - 161 + 116 + 167 826 - 164 - 269 + 168 + 273 + 856 + + + 275 + 373 826 - 269 - 361 + 373 + 492 826 - 364 - 464 + 517 + 1154 826 - 477 - 1105 + 1167 + 2661 826 - 1105 - 2387 - 826 - - - 2455 + 2853 13984 - 797 + 708 @@ -18520,7 +18528,7 @@ declaring_type_id - 33842 + 33841 type_id @@ -18528,7 +18536,7 @@ unbound_id - 70637 + 70636 @@ -18791,7 +18799,7 @@ 3 4 - 3396 + 3395 4 @@ -18945,7 +18953,7 @@ 3 262 - 1447 + 1446 @@ -19007,7 +19015,7 @@ 3 4 - 3396 + 3395 4 @@ -19033,7 +19041,7 @@ 1 2 - 68127 + 68126 2 @@ -19054,7 +19062,7 @@ 1 2 - 70637 + 70636 @@ -19070,7 +19078,7 @@ 1 2 - 68127 + 68126 2 @@ -19199,11 +19207,11 @@ event_accessors - 160823 + 160822 id - 160823 + 160822 kind @@ -19211,7 +19219,7 @@ name - 68688 + 68687 declaring_event_id @@ -19219,7 +19227,7 @@ unbound_id - 141274 + 141273 @@ -19233,7 +19241,7 @@ 1 2 - 160823 + 160822 @@ -19249,7 +19257,7 @@ 1 2 - 160823 + 160822 @@ -19265,7 +19273,7 @@ 1 2 - 160823 + 160822 @@ -19281,7 +19289,7 @@ 1 2 - 160823 + 160822 @@ -19397,7 +19405,7 @@ 1 2 - 68688 + 68687 @@ -19549,7 +19557,7 @@ 1 2 - 136254 + 136253 2 @@ -19570,7 +19578,7 @@ 1 2 - 141274 + 141273 @@ -19586,7 +19594,7 @@ 1 2 - 141274 + 141273 @@ -19602,7 +19610,7 @@ 1 2 - 136254 + 136253 2 @@ -19617,11 +19625,11 @@ event_accessor_location - 160823 + 160822 id - 160823 + 160822 loc @@ -19639,7 +19647,7 @@ 1 2 - 160823 + 160822 @@ -19710,11 +19718,11 @@ operators - 629721 + 629715 id - 629721 + 629715 name @@ -19726,11 +19734,11 @@ declaring_type_id - 75488 + 75487 type_id - 30578 + 30577 unbound_id @@ -19748,7 +19756,7 @@ 1 2 - 629721 + 629715 @@ -19764,7 +19772,7 @@ 1 2 - 629721 + 629715 @@ -19780,7 +19788,7 @@ 1 2 - 629721 + 629715 @@ -19796,7 +19804,7 @@ 1 2 - 629721 + 629715 @@ -19812,7 +19820,7 @@ 1 2 - 629721 + 629715 @@ -20443,7 +20451,7 @@ 7 16 - 5808 + 5807 16 @@ -20552,7 +20560,7 @@ 7 16 - 5808 + 5807 16 @@ -20813,7 +20821,7 @@ 1 2 - 66686 + 66685 2 @@ -20871,7 +20879,7 @@ 1 2 - 66686 + 66685 2 @@ -20917,15 +20925,15 @@ operator_location - 1210557 + 1210545 id - 586251 + 586245 loc - 10667 + 10683 @@ -20944,12 +20952,12 @@ 2 3 - 567174 + 567169 3 7 - 15248 + 15247 @@ -20985,7 +20993,7 @@ 39 50 - 916 + 899 52 @@ -21010,7 +21018,7 @@ 79 83 - 850 + 867 85 @@ -21025,12 +21033,12 @@ 97 279 - 801 + 834 - 345 - 17300 - 65 + 664 + 17251 + 49 @@ -21040,15 +21048,15 @@ constant_value - 3875422 + 3875386 id - 3873680 + 3873643 value - 1314319 + 1314307 @@ -21062,7 +21070,7 @@ 1 2 - 3872528 + 3872492 2 @@ -21083,17 +21091,17 @@ 1 2 - 1062512 + 1062502 2 3 - 130820 + 130819 3 10 - 101821 + 101820 10 @@ -21108,27 +21116,27 @@ methods - 20454980 + 20454789 id - 20454980 + 20454789 name - 5761337 + 5761283 declaring_type_id - 4275208 + 4275168 type_id - 1360564 + 1360551 unbound_id - 16901323 + 16901165 @@ -21142,7 +21150,7 @@ 1 2 - 20454980 + 20454789 @@ -21158,7 +21166,7 @@ 1 2 - 20454980 + 20454789 @@ -21174,7 +21182,7 @@ 1 2 - 20454980 + 20454789 @@ -21190,7 +21198,7 @@ 1 2 - 20454980 + 20454789 @@ -21206,22 +21214,22 @@ 1 2 - 4128352 + 4128313 2 3 - 674804 + 674798 3 5 - 458551 + 458547 5 26 - 434749 + 434745 26 @@ -21242,22 +21250,22 @@ 1 2 - 4308282 + 4308242 2 3 - 587629 + 587624 3 6 - 515220 + 515216 6 10142 - 350203 + 350200 @@ -21273,17 +21281,17 @@ 1 2 - 5249541 + 5249492 2 7 - 440360 + 440356 7 2905 - 71434 + 71433 @@ -21299,22 +21307,22 @@ 1 2 - 4191695 + 4191656 2 3 - 694589 + 694583 3 5 - 457960 + 457956 5 8458 - 417090 + 417086 @@ -21330,42 +21338,42 @@ 1 2 - 1491562 + 1491548 2 3 - 954902 + 954893 3 4 - 425388 + 425384 4 5 - 301773 + 301770 5 6 - 243096 + 243093 6 9 - 373828 + 373824 9 18 - 328971 + 328968 18 8066 - 155685 + 155684 @@ -21381,37 +21389,37 @@ 1 2 - 1548261 + 1548246 2 3 - 987947 + 987937 3 4 - 436728 + 436724 4 5 - 342466 + 342463 5 6 - 264771 + 264769 6 10 - 361484 + 361481 10 70 - 320850 + 320847 70 @@ -21432,32 +21440,32 @@ 1 2 - 2042987 + 2042968 2 3 - 1046683 + 1046673 3 4 - 428371 + 428367 4 5 - 350735 + 350731 5 10 - 321559 + 321556 10 848 - 84871 + 84870 @@ -21473,42 +21481,42 @@ 1 2 - 1491592 + 1491578 2 3 - 954872 + 954863 3 4 - 425388 + 425384 4 5 - 301773 + 301770 5 6 - 243096 + 243093 6 9 - 373828 + 373824 9 18 - 328971 + 328968 18 8066 - 155685 + 155684 @@ -21524,32 +21532,32 @@ 1 2 - 771576 + 771569 2 3 - 224580 + 224578 3 4 - 98868 + 98867 4 7 - 120691 + 120690 7 23 - 102766 + 102765 23 192615 - 42081 + 42080 @@ -21565,22 +21573,22 @@ 1 2 - 948848 + 948839 2 3 - 179546 + 179544 3 5 - 116380 + 116379 5 27 - 102235 + 102234 27 @@ -21601,22 +21609,22 @@ 1 2 - 883290 + 883282 2 3 - 215160 + 215158 3 4 - 88798 + 88797 4 9 - 108554 + 108553 9 @@ -21637,22 +21645,22 @@ 1 2 - 774322 + 774315 2 3 - 226381 + 226379 3 4 - 99163 + 99162 4 7 - 121607 + 121605 7 @@ -21662,7 +21670,7 @@ 24 167300 - 36913 + 36912 @@ -21678,12 +21686,12 @@ 1 2 - 16368679 + 16368526 2 3017 - 532643 + 532638 @@ -21699,7 +21707,7 @@ 1 2 - 16901323 + 16901165 @@ -21715,12 +21723,12 @@ 1 2 - 16368797 + 16368644 2 3017 - 532525 + 532520 @@ -21736,12 +21744,12 @@ 1 2 - 16731877 + 16731720 2 1636 - 169446 + 169445 @@ -21751,11 +21759,11 @@ method_location - 20553553 + 20553361 id - 20454980 + 20454789 loc @@ -21773,7 +21781,7 @@ 1 2 - 20387030 + 20386839 2 @@ -21864,23 +21872,23 @@ constructors - 5991233 + 5991176 id - 5991233 + 5991176 name - 2792770 + 2792744 declaring_type_id - 4484787 + 4484745 unbound_id - 5562625 + 5562573 @@ -21894,7 +21902,7 @@ 1 2 - 5991233 + 5991176 @@ -21910,7 +21918,7 @@ 1 2 - 5991233 + 5991176 @@ -21926,7 +21934,7 @@ 1 2 - 5991233 + 5991176 @@ -21942,17 +21950,17 @@ 1 2 - 2023704 + 2023685 2 3 - 507720 + 507715 3 7 - 213388 + 213386 7 @@ -21973,17 +21981,17 @@ 1 2 - 2556289 + 2556265 2 6 - 210435 + 210433 6 11806 - 26046 + 26045 @@ -21999,17 +22007,17 @@ 1 2 - 2053914 + 2053895 2 3 - 509344 + 509339 3 10 - 211291 + 211289 10 @@ -22030,17 +22038,17 @@ 1 2 - 3341745 + 3341713 2 3 - 968752 + 968743 3 55 - 174289 + 174288 @@ -22056,7 +22064,7 @@ 1 2 - 4484787 + 4484745 @@ -22072,17 +22080,17 @@ 1 2 - 3341745 + 3341713 2 3 - 968752 + 968743 3 55 - 174289 + 174288 @@ -22098,7 +22106,7 @@ 1 2 - 5506044 + 5505993 2 @@ -22119,7 +22127,7 @@ 1 2 - 5562625 + 5562573 @@ -22135,7 +22143,7 @@ 1 2 - 5506044 + 5505993 2 @@ -22150,11 +22158,11 @@ constructor_location - 6040667 + 6040610 id - 5991233 + 5991176 loc @@ -22172,7 +22180,7 @@ 1 2 - 5971329 + 5971273 2 @@ -22526,7 +22534,7 @@ 1 2 - 6290 + 6289 2 @@ -22582,15 +22590,15 @@ overrides - 4832155 + 4832110 id - 4832155 + 4832110 base_id - 1569700 + 1569685 @@ -22604,7 +22612,7 @@ 1 2 - 4832155 + 4832110 @@ -22620,22 +22628,22 @@ 1 2 - 1071371 + 1071361 2 3 - 247171 + 247169 3 5 - 127336 + 127334 5 44 - 117738 + 117737 44 @@ -22650,15 +22658,15 @@ explicitly_implements - 1824372 + 1824355 id - 1823811 + 1823794 interface_id - 134836 + 134835 @@ -22672,7 +22680,7 @@ 1 2 - 1823250 + 1823233 2 @@ -22693,7 +22701,7 @@ 1 2 - 69072 + 69071 2 @@ -22713,12 +22721,12 @@ 6 10 - 10188 + 10187 10 35 - 10188 + 10187 35 @@ -23077,11 +23085,11 @@ fields - 14976517 + 14976377 id - 14976517 + 14976377 kind @@ -23089,19 +23097,19 @@ name - 6219416 + 6219358 declaring_type_id - 3386631 + 3386599 type_id - 2968123 + 2968095 unbound_id - 14485511 + 14485376 @@ -23115,7 +23123,7 @@ 1 2 - 14976517 + 14976377 @@ -23131,7 +23139,7 @@ 1 2 - 14976517 + 14976377 @@ -23147,7 +23155,7 @@ 1 2 - 14976517 + 14976377 @@ -23163,7 +23171,7 @@ 1 2 - 14976517 + 14976377 @@ -23179,7 +23187,7 @@ 1 2 - 14976517 + 14976377 @@ -23300,22 +23308,22 @@ 1 2 - 4898363 + 4898317 2 3 - 694826 + 694819 3 8 - 467558 + 467554 8 12308 - 158668 + 158666 @@ -23331,12 +23339,12 @@ 1 2 - 6076724 + 6076667 2 3 - 142691 + 142690 @@ -23352,22 +23360,22 @@ 1 2 - 4898363 + 4898317 2 3 - 694855 + 694849 3 8 - 467528 + 467524 8 12308 - 158668 + 158666 @@ -23383,17 +23391,17 @@ 1 2 - 5453627 + 5453576 2 3 - 467587 + 467583 3 12308 - 298200 + 298197 @@ -23409,22 +23417,22 @@ 1 2 - 4931319 + 4931273 2 3 - 696538 + 696532 3 10 - 479636 + 479631 10 12308 - 111921 + 111920 @@ -23440,42 +23448,42 @@ 1 2 - 934142 + 934133 2 3 - 866074 + 866066 3 4 - 480847 + 480842 4 5 - 296428 + 296425 5 6 - 198859 + 198857 6 8 - 247466 + 247464 8 15 - 263619 + 263617 15 6823 - 99193 + 99192 @@ -23491,12 +23499,12 @@ 1 2 - 3183076 + 3183047 2 3 - 203554 + 203552 @@ -23512,42 +23520,42 @@ 1 2 - 934142 + 934133 2 3 - 866103 + 866095 3 4 - 480817 + 480813 4 5 - 296428 + 296425 5 6 - 198859 + 198857 6 8 - 247466 + 247464 8 15 - 263619 + 263617 15 6823 - 99193 + 99192 @@ -23563,32 +23571,32 @@ 1 2 - 1290399 + 1290387 2 3 - 940550 + 940541 3 4 - 442309 + 442305 4 5 - 234473 + 234470 5 8 - 310957 + 310954 8 524 - 167940 + 167939 @@ -23604,42 +23612,42 @@ 1 2 - 934142 + 934133 2 3 - 866074 + 866066 3 4 - 480847 + 480842 4 5 - 296428 + 296425 5 6 - 198859 + 198857 6 8 - 247466 + 247464 8 15 - 263619 + 263617 15 6823 - 99193 + 99192 @@ -23655,22 +23663,22 @@ 1 2 - 2017945 + 2017927 2 3 - 365766 + 365762 3 5 - 273335 + 273332 5 14 - 225436 + 225434 14 @@ -23691,12 +23699,12 @@ 1 2 - 2881953 + 2881926 2 3 - 86170 + 86169 @@ -23712,22 +23720,22 @@ 1 2 - 2161080 + 2161060 2 3 - 352477 + 352474 3 5 - 233675 + 233673 5 33041 - 220889 + 220887 @@ -23743,22 +23751,22 @@ 1 2 - 2240193 + 2240172 2 3 - 357172 + 357169 3 6 - 229600 + 229598 6 19141 - 141156 + 141155 @@ -23774,27 +23782,27 @@ 1 2 - 2022907 + 2022888 2 3 - 368453 + 368450 3 5 - 271356 + 271354 5 15 - 228626 + 228623 15 56593 - 76779 + 76778 @@ -23810,12 +23818,12 @@ 1 2 - 14401378 + 14401244 2 1016 - 84132 + 84131 @@ -23831,7 +23839,7 @@ 1 2 - 14485511 + 14485376 @@ -23847,7 +23855,7 @@ 1 2 - 14485511 + 14485376 @@ -23863,12 +23871,12 @@ 1 2 - 14401378 + 14401244 2 1016 - 84132 + 84131 @@ -23884,7 +23892,7 @@ 1 2 - 14459317 + 14459182 2 @@ -23899,11 +23907,11 @@ field_location - 14965266 + 14965126 id - 14877383 + 14877243 loc @@ -23921,12 +23929,12 @@ 1 2 - 14824434 + 14824296 2 22 - 52948 + 52947 @@ -24017,11 +24025,11 @@ localvars - 499216 + 499212 id - 499216 + 499212 kind @@ -24029,7 +24037,7 @@ name - 91306 + 91305 implicitly_typed @@ -24041,7 +24049,7 @@ parent_id - 499216 + 499212 @@ -24055,7 +24063,7 @@ 1 2 - 499216 + 499212 @@ -24071,7 +24079,7 @@ 1 2 - 499216 + 499212 @@ -24087,7 +24095,7 @@ 1 2 - 499216 + 499212 @@ -24103,7 +24111,7 @@ 1 2 - 499216 + 499212 @@ -24119,7 +24127,7 @@ 1 2 - 499216 + 499212 @@ -24240,7 +24248,7 @@ 1 2 - 57798 + 57797 2 @@ -24276,7 +24284,7 @@ 1 2 - 91122 + 91121 2 @@ -24318,7 +24326,7 @@ 1 2 - 78906 + 78905 2 @@ -24344,7 +24352,7 @@ 1 2 - 57798 + 57797 2 @@ -24593,7 +24601,7 @@ 1 2 - 18824 + 18823 2 @@ -24660,7 +24668,7 @@ 1 2 - 499216 + 499212 @@ -24676,7 +24684,7 @@ 1 2 - 499216 + 499212 @@ -24692,7 +24700,7 @@ 1 2 - 499216 + 499212 @@ -24708,7 +24716,7 @@ 1 2 - 499216 + 499212 @@ -24724,7 +24732,7 @@ 1 2 - 499216 + 499212 @@ -24734,15 +24742,15 @@ localvar_location - 499216 + 499212 id - 499216 + 499212 loc - 499216 + 499212 @@ -24756,7 +24764,7 @@ 1 2 - 499216 + 499212 @@ -24772,7 +24780,7 @@ 1 2 - 499216 + 499212 @@ -24782,19 +24790,19 @@ params - 37386455 + 37386105 id - 37386455 + 37386105 name - 2196576 + 2196556 type_id - 2827941 + 2827915 index @@ -24806,11 +24814,11 @@ parent_id - 20722350 + 20722157 unbound_id - 30114153 + 30113872 @@ -24824,7 +24832,7 @@ 1 2 - 37386455 + 37386105 @@ -24840,7 +24848,7 @@ 1 2 - 37386455 + 37386105 @@ -24856,7 +24864,7 @@ 1 2 - 37386455 + 37386105 @@ -24872,7 +24880,7 @@ 1 2 - 37386455 + 37386105 @@ -24888,7 +24896,7 @@ 1 2 - 37386455 + 37386105 @@ -24904,7 +24912,7 @@ 1 2 - 37386455 + 37386105 @@ -24920,37 +24928,37 @@ 1 2 - 981598 + 981588 2 3 - 381535 + 381532 3 4 - 185481 + 185480 4 6 - 196585 + 196583 6 10 - 173876 + 173874 10 25 - 165666 + 165665 25 74292 - 111832 + 111831 @@ -24966,22 +24974,22 @@ 1 2 - 1784417 + 1784401 2 3 - 214156 + 214154 3 13 - 166995 + 166994 13 13366 - 31007 + 31006 @@ -24997,22 +25005,22 @@ 1 2 - 1518996 + 1518982 2 3 - 374596 + 374592 3 4 - 146294 + 146293 4 21 - 156689 + 156688 @@ -25028,12 +25036,12 @@ 1 2 - 2031234 + 2031215 2 6 - 164928 + 164927 6 @@ -25054,37 +25062,37 @@ 1 2 - 981598 + 981588 2 3 - 381535 + 381532 3 4 - 185481 + 185480 4 6 - 196585 + 196583 6 10 - 173876 + 173874 10 25 - 165666 + 165665 25 74292 - 111832 + 111831 @@ -25100,37 +25108,37 @@ 1 2 - 1002151 + 1002142 2 3 - 388504 + 388501 3 4 - 199951 + 199950 4 6 - 201103 + 201101 6 10 - 166050 + 166049 10 35 - 166670 + 166669 35 63585 - 72143 + 72142 @@ -25146,37 +25154,37 @@ 1 2 - 1386197 + 1386184 2 3 - 410623 + 410619 3 4 - 235861 + 235858 4 5 - 175736 + 175735 5 8 - 215278 + 215276 8 19 - 219383 + 219380 19 90397 - 184861 + 184860 @@ -25192,22 +25200,22 @@ 1 2 - 1901536 + 1901518 2 3 - 477539 + 477535 3 4 - 203436 + 203434 4 13 - 212650 + 212648 13 @@ -25228,22 +25236,22 @@ 1 2 - 2062921 + 2062901 2 3 - 482589 + 482585 3 6 - 239670 + 239668 6 54 - 42760 + 42759 @@ -25259,12 +25267,12 @@ 1 2 - 2663278 + 2663253 2 6 - 164662 + 164661 @@ -25280,37 +25288,37 @@ 1 2 - 1428366 + 1428353 2 3 - 383720 + 383717 3 4 - 237012 + 237010 4 5 - 173403 + 173402 5 9 - 247850 + 247848 9 24 - 214362 + 214360 24 74138 - 143223 + 143222 @@ -25326,37 +25334,37 @@ 1 2 - 1394672 + 1394659 2 3 - 412158 + 412155 3 4 - 252280 + 252277 4 5 - 174703 + 174701 5 8 - 225377 + 225375 8 19 - 214185 + 214183 19 84336 - 154563 + 154561 @@ -25964,27 +25972,27 @@ 1 2 - 11717399 + 11717289 2 3 - 5233890 + 5233841 3 4 - 2032032 + 2032013 4 8 - 1570586 + 1570571 8 56 - 168442 + 168441 @@ -26000,27 +26008,27 @@ 1 2 - 11717369 + 11717259 2 3 - 5233890 + 5233841 3 4 - 2032032 + 2032013 4 8 - 1570616 + 1570601 8 56 - 168442 + 168441 @@ -26036,22 +26044,22 @@ 1 2 - 12389722 + 12389607 2 3 - 5150023 + 5149975 3 4 - 1884349 + 1884331 4 43 - 1298255 + 1298242 @@ -26067,27 +26075,27 @@ 1 2 - 11717399 + 11717289 2 3 - 5233890 + 5233841 3 4 - 2032032 + 2032013 4 8 - 1570586 + 1570571 8 56 - 168442 + 168441 @@ -26103,12 +26111,12 @@ 1 2 - 19796358 + 19796173 2 5 - 925991 + 925983 @@ -26124,27 +26132,27 @@ 1 2 - 11717399 + 11717289 2 3 - 5233890 + 5233841 3 4 - 2032032 + 2032013 4 8 - 1570586 + 1570571 8 56 - 168442 + 168441 @@ -26160,12 +26168,12 @@ 1 2 - 29105919 + 29105646 2 17584 - 1008234 + 1008225 @@ -26181,7 +26189,7 @@ 1 2 - 30114065 + 30113783 2 @@ -26202,12 +26210,12 @@ 1 2 - 29808925 + 29808646 2 9835 - 305228 + 305225 @@ -26223,7 +26231,7 @@ 1 2 - 30114153 + 30113872 @@ -26239,7 +26247,7 @@ 1 2 - 30114153 + 30113872 @@ -26255,12 +26263,12 @@ 1 2 - 29105919 + 29105646 2 17584 - 1008234 + 1008225 @@ -26270,11 +26278,11 @@ param_location - 37558973 + 37558621 id - 37386071 + 37385721 loc @@ -26292,12 +26300,12 @@ 1 2 - 37269041 + 37268692 2 70 - 117029 + 117028 @@ -26383,11 +26391,11 @@ statements - 2457863 + 2457840 id - 2457863 + 2457840 kind @@ -26405,7 +26413,7 @@ 1 2 - 2457863 + 2457840 @@ -26501,11 +26509,11 @@ stmt_parent - 2097112 + 2097092 stmt - 2097112 + 2097092 index @@ -26513,7 +26521,7 @@ parent - 1004054 + 1004045 @@ -26527,7 +26535,7 @@ 1 2 - 2097112 + 2097092 @@ -26543,7 +26551,7 @@ 1 2 - 2097112 + 2097092 @@ -26671,27 +26679,27 @@ 1 2 - 647155 + 647149 2 3 - 190657 + 190656 3 4 - 62747 + 62746 4 9 - 80168 + 80167 9 3407 - 23326 + 23325 @@ -26707,27 +26715,27 @@ 1 2 - 647155 + 647149 2 3 - 190657 + 190656 3 4 - 62747 + 62746 4 9 - 80168 + 80167 9 3407 - 23326 + 23325 @@ -26737,11 +26745,11 @@ stmt_parent_top_level - 360750 + 360747 stmt - 360750 + 360747 index @@ -26749,7 +26757,7 @@ parent - 340705 + 340702 @@ -26763,7 +26771,7 @@ 1 2 - 360750 + 360747 @@ -26779,7 +26787,7 @@ 1 2 - 360750 + 360747 @@ -26827,12 +26835,12 @@ 1 2 - 322204 + 322201 2 5 - 18501 + 18500 @@ -26848,7 +26856,7 @@ 1 2 - 340705 + 340702 @@ -26858,15 +26866,15 @@ stmt_location - 2457857 + 2457834 id - 2457857 + 2457834 loc - 2376792 + 2376770 @@ -26880,7 +26888,7 @@ 1 2 - 2457857 + 2457834 @@ -26896,7 +26904,7 @@ 1 2 - 2300098 + 2300076 2 @@ -27130,7 +27138,7 @@ foreach_stmt_desugar - 133866 + 133865 id @@ -27311,11 +27319,11 @@ expressions - 9729220 + 9729129 id - 9729220 + 9729129 kind @@ -27337,7 +27345,7 @@ 1 2 - 9729220 + 9729129 @@ -27353,7 +27361,7 @@ 1 2 - 9729220 + 9729129 @@ -27562,7 +27570,7 @@ 1 2 - 33100 + 33099 2 @@ -27602,19 +27610,19 @@ expr_parent - 9420716 + 9420628 expr - 9420716 + 9420628 index - 32816 + 32815 parent - 6308266 + 6308207 @@ -27628,7 +27636,7 @@ 1 2 - 9420716 + 9420628 @@ -27644,7 +27652,7 @@ 1 2 - 9420716 + 9420628 @@ -27665,7 +27673,7 @@ 4 5 - 17079 + 17078 5 @@ -27711,7 +27719,7 @@ 4 5 - 17079 + 17078 5 @@ -27752,17 +27760,17 @@ 1 2 - 4096813 + 4096774 2 3 - 1896471 + 1896453 3 22534 - 314982 + 314979 @@ -27778,17 +27786,17 @@ 1 2 - 4096813 + 4096774 2 3 - 1896471 + 1896453 3 22534 - 314982 + 314979 @@ -27798,11 +27806,11 @@ expr_parent_top_level - 5483306 + 5483254 expr - 5483306 + 5483254 index @@ -27810,7 +27818,7 @@ parent - 3999864 + 3999827 @@ -27824,7 +27832,7 @@ 1 2 - 5483306 + 5483254 @@ -27840,7 +27848,7 @@ 1 2 - 5483306 + 5483254 @@ -27998,17 +28006,17 @@ 1 2 - 3335573 + 3335541 2 3 - 383809 + 383805 3 14 - 280481 + 280479 @@ -28024,17 +28032,17 @@ 1 2 - 3339559 + 3339528 2 3 - 380649 + 380646 3 12 - 279655 + 279652 @@ -28141,26 +28149,26 @@ expr_compiler_generated - 9719652 + 9719561 id - 9719652 + 9719561 expr_value - 6749402 + 6749339 id - 6749402 + 6749339 value - 838197 + 838189 @@ -28174,7 +28182,7 @@ 1 2 - 6749402 + 6749339 @@ -28190,17 +28198,17 @@ 1 2 - 578711 + 578706 2 3 - 137760 + 137759 3 4 - 66857 + 66856 4 @@ -28215,15 +28223,15 @@ expr_call - 1585560 + 1585545 caller_id - 1585560 + 1585545 target_id - 207402 + 207400 @@ -28237,7 +28245,7 @@ 1 2 - 1585560 + 1585545 @@ -28253,17 +28261,17 @@ 1 2 - 110904 + 110903 2 3 - 41217 + 41218 3 4 - 15565 + 15563 4 @@ -28288,15 +28296,15 @@ expr_access - 3615705 + 3615672 accesser_id - 3615705 + 3615672 target_id - 874845 + 874837 @@ -28310,7 +28318,7 @@ 1 2 - 3615705 + 3615672 @@ -28326,32 +28334,32 @@ 1 2 - 292104 + 292101 2 3 - 190758 + 190756 3 4 - 134524 + 134523 4 5 - 82548 + 82547 5 7 - 80286 + 80285 7 15 - 68016 + 68015 15 @@ -28366,15 +28374,15 @@ expr_location - 9729220 + 9729129 id - 9729220 + 9729129 loc - 7546334 + 7546264 @@ -28388,7 +28396,7 @@ 1 2 - 9729220 + 9729129 @@ -28404,17 +28412,17 @@ 1 2 - 6528710 + 6528648 2 3 - 981628 + 981619 3 9211 - 35996 + 35995 @@ -28576,11 +28584,11 @@ expr_argument_name - 731798 + 731791 id - 731798 + 731791 name @@ -28598,7 +28606,7 @@ 1 2 - 731798 + 731791 @@ -29248,11 +29256,11 @@ xmlElements - 60596893 + 60596686 id - 60596893 + 60596686 name @@ -29260,7 +29268,7 @@ parentid - 24508816 + 24508733 idx @@ -29282,7 +29290,7 @@ 1 2 - 60596893 + 60596686 @@ -29298,7 +29306,7 @@ 1 2 - 60596893 + 60596686 @@ -29314,7 +29322,7 @@ 1 2 - 60596893 + 60596686 @@ -29330,7 +29338,7 @@ 1 2 - 60596893 + 60596686 @@ -29520,27 +29528,27 @@ 1 2 - 14236583 + 14236534 2 3 - 4770003 + 4769987 3 4 - 2178795 + 2178787 4 6 - 2111342 + 2111335 6 17196 - 1212092 + 1212088 @@ -29556,22 +29564,22 @@ 1 2 - 16928804 + 16928747 2 3 - 4145902 + 4145888 3 4 - 2094945 + 2094938 4 125 - 1339163 + 1339158 @@ -29587,27 +29595,27 @@ 1 2 - 14236583 + 14236534 2 3 - 4770003 + 4769987 3 4 - 2178795 + 2178787 4 6 - 2111342 + 2111335 6 17196 - 1212092 + 1212088 @@ -29623,7 +29631,7 @@ 1 2 - 24508816 + 24508733 @@ -30211,15 +30219,15 @@ xmlAttrs - 41517960 + 41517819 id - 41517960 + 41517819 elementid - 41169454 + 41169314 name @@ -30227,7 +30235,7 @@ value - 884047 + 884044 idx @@ -30249,7 +30257,7 @@ 1 2 - 41517960 + 41517819 @@ -30265,7 +30273,7 @@ 1 2 - 41517960 + 41517819 @@ -30281,7 +30289,7 @@ 1 2 - 41517960 + 41517819 @@ -30297,7 +30305,7 @@ 1 2 - 41517960 + 41517819 @@ -30313,7 +30321,7 @@ 1 2 - 41517960 + 41517819 @@ -30329,7 +30337,7 @@ 1 2 - 40983430 + 40983290 2 @@ -30350,7 +30358,7 @@ 1 2 - 40983430 + 40983290 2 @@ -30371,12 +30379,12 @@ 1 2 - 40983630 + 40983491 2 13 - 185823 + 185822 @@ -30392,7 +30400,7 @@ 1 2 - 40983430 + 40983290 2 @@ -30413,7 +30421,7 @@ 1 2 - 41169454 + 41169314 @@ -30714,7 +30722,7 @@ 2 3 - 308689 + 308688 3 @@ -30739,12 +30747,12 @@ 8 13 - 75195 + 75194 13 29 - 70437 + 70436 29 @@ -30775,7 +30783,7 @@ 2 3 - 308696 + 308695 3 @@ -30785,12 +30793,12 @@ 4 5 - 76925 + 76924 5 6 - 38840 + 38839 6 @@ -30815,7 +30823,7 @@ 150 471089 - 33754 + 33753 @@ -30831,7 +30839,7 @@ 1 2 - 781511 + 781509 2 @@ -30857,7 +30865,7 @@ 1 2 - 882313 + 882310 2 @@ -30883,7 +30891,7 @@ 2 3 - 365376 + 365375 3 @@ -30913,7 +30921,7 @@ 28 159 - 69846 + 69845 159 @@ -31461,7 +31469,7 @@ 2 3 - 20057 + 20056 3 @@ -31481,7 +31489,7 @@ 6 71 - 3414 + 3413 @@ -31994,11 +32002,11 @@ xmlHasNs - 501577 + 501573 elementId - 501577 + 501573 nsId @@ -32020,7 +32028,7 @@ 1 2 - 501577 + 501573 @@ -32036,7 +32044,7 @@ 1 2 - 501577 + 501573 @@ -32516,19 +32524,19 @@ xmlChars - 45379511 + 45379357 id - 45379511 + 45379357 text - 1700662 + 1700656 parentid - 28480349 + 28480252 idx @@ -32554,7 +32562,7 @@ 1 2 - 45379511 + 45379357 @@ -32570,7 +32578,7 @@ 1 2 - 45379511 + 45379357 @@ -32586,7 +32594,7 @@ 1 2 - 45379511 + 45379357 @@ -32602,7 +32610,7 @@ 1 2 - 45379511 + 45379357 @@ -32618,7 +32626,7 @@ 1 2 - 45379511 + 45379357 @@ -32639,7 +32647,7 @@ 2 3 - 421882 + 421881 3 @@ -32659,12 +32667,12 @@ 6 8 - 141441 + 141440 8 9 - 87852 + 87851 9 @@ -32674,7 +32682,7 @@ 12 15 - 83186 + 83185 15 @@ -32705,12 +32713,12 @@ 1 2 - 165834 + 165833 2 3 - 421942 + 421941 3 @@ -32720,7 +32728,7 @@ 4 5 - 175866 + 175865 5 @@ -32740,7 +32748,7 @@ 9 12 - 148677 + 148676 12 @@ -32755,12 +32763,12 @@ 19 54 - 127684 + 127683 54 918936 - 93732 + 93731 @@ -32776,12 +32784,12 @@ 1 2 - 1668609 + 1668603 2 33 - 32053 + 32052 @@ -32797,7 +32805,7 @@ 1 2 - 1700660 + 1700654 2 @@ -32823,12 +32831,12 @@ 2 3 - 498940 + 498938 3 4 - 94931 + 94930 4 @@ -32843,12 +32851,12 @@ 6 8 - 145526 + 145525 8 10 - 153688 + 153687 10 @@ -32863,7 +32871,7 @@ 17 14127 - 118981 + 118980 @@ -32879,22 +32887,22 @@ 1 2 - 17038280 + 17038222 2 3 - 8292992 + 8292964 3 4 - 2084035 + 2084028 4 61 - 1065041 + 1065037 @@ -32910,22 +32918,22 @@ 1 2 - 17040164 + 17040106 2 3 - 8301726 + 8301698 3 4 - 2100188 + 2100181 4 47 - 1038269 + 1038266 @@ -32941,22 +32949,22 @@ 1 2 - 17038280 + 17038222 2 3 - 8292992 + 8292964 3 4 - 2084035 + 2084028 4 61 - 1065041 + 1065037 @@ -32972,7 +32980,7 @@ 1 2 - 28479968 + 28479871 2 @@ -32993,7 +33001,7 @@ 1 2 - 28480349 + 28480252 @@ -33688,15 +33696,15 @@ xmllocations - 147551916 + 147551414 xmlElement - 147546832 + 147546330 location - 128989681 + 128989242 @@ -33710,7 +33718,7 @@ 1 2 - 147546786 + 147546284 2 @@ -33731,17 +33739,17 @@ 1 2 - 110766476 + 110766100 2 3 - 18041929 + 18041868 3 15 - 181275 + 181274 @@ -33751,11 +33759,11 @@ commentline - 1542316 + 1542302 id - 1542316 + 1542302 kind @@ -33763,11 +33771,11 @@ text - 576331 + 576326 rawtext - 581672 + 581666 @@ -33781,7 +33789,7 @@ 1 2 - 1542316 + 1542302 @@ -33797,7 +33805,7 @@ 1 2 - 1542316 + 1542302 @@ -33813,7 +33821,7 @@ 1 2 - 1542316 + 1542302 @@ -33907,7 +33915,7 @@ 1 2 - 482114 + 482110 2 @@ -33917,7 +33925,7 @@ 3 21079 - 40791 + 40790 @@ -33933,7 +33941,7 @@ 1 2 - 574463 + 574458 2 @@ -33954,12 +33962,12 @@ 1 2 - 572802 + 572797 2 40 - 3529 + 3528 @@ -33975,12 +33983,12 @@ 1 2 - 487842 + 487837 2 3 - 52897 + 52896 3 @@ -34001,7 +34009,7 @@ 1 2 - 581672 + 581666 @@ -34017,7 +34025,7 @@ 1 2 - 581672 + 581666 @@ -34027,15 +34035,15 @@ commentline_location - 1542316 + 1542302 id - 1542316 + 1542302 loc - 1542316 + 1542302 @@ -34049,7 +34057,7 @@ 1 2 - 1542316 + 1542302 @@ -34065,7 +34073,7 @@ 1 2 - 1542316 + 1542302 @@ -34075,26 +34083,26 @@ commentblock - 374970 + 374967 id - 374970 + 374967 commentblock_location - 374970 + 374967 id - 374970 + 374967 loc - 374970 + 374967 @@ -34108,7 +34116,7 @@ 1 2 - 374970 + 374967 @@ -34124,7 +34132,7 @@ 1 2 - 374970 + 374967 @@ -34134,15 +34142,15 @@ commentblock_binding - 1356034 + 1356021 id - 374970 + 374967 entity - 587088 + 587083 bindtype @@ -34165,12 +34173,12 @@ 2 3 - 86989 + 86988 3 4 - 264873 + 264871 @@ -34186,17 +34194,17 @@ 1 3 - 23382 + 23381 3 4 - 86715 + 86714 4 5 - 264873 + 264871 @@ -34212,17 +34220,17 @@ 1 2 - 415337 + 415333 2 3 - 139839 + 139837 3 524 - 31912 + 31911 @@ -34238,17 +34246,17 @@ 1 2 - 222402 + 222400 2 3 - 230404 + 230402 3 4 - 124694 + 124693 4 @@ -34325,15 +34333,15 @@ commentblock_child - 1901595 + 1901577 id - 374970 + 374967 commentline - 1541684 + 1541669 index @@ -34351,17 +34359,17 @@ 1 2 - 116560 + 116559 2 3 - 36356 + 36355 3 4 - 86073 + 86072 4 @@ -34371,12 +34379,12 @@ 5 6 - 48132 + 48131 6 10 - 32865 + 32864 10 @@ -34402,7 +34410,7 @@ 2 3 - 114183 + 114182 3 @@ -34448,7 +34456,7 @@ 1 2 - 1541684 + 1541669 @@ -34464,12 +34472,12 @@ 1 2 - 1181773 + 1181761 2 3 - 359911 + 359907 @@ -34581,11 +34589,11 @@ asp_elements - 148402 + 148401 id - 148402 + 148401 kind @@ -34593,7 +34601,7 @@ loc - 148402 + 148401 @@ -34607,7 +34615,7 @@ 1 2 - 148402 + 148401 @@ -34623,7 +34631,7 @@ 1 2 - 148402 + 148401 @@ -34751,7 +34759,7 @@ 1 2 - 148402 + 148401 @@ -34767,7 +34775,7 @@ 1 2 - 148402 + 148401 @@ -35368,11 +35376,11 @@ asp_element_body - 118618 + 118617 element - 118618 + 118617 body @@ -35390,7 +35398,7 @@ 1 2 - 118618 + 118617 @@ -36216,11 +36224,11 @@ cil_instruction - 504260704 + 504255988 id - 504260704 + 504255988 opcode @@ -36228,11 +36236,11 @@ index - 1697213 + 1697197 impl - 23978900 + 23978675 @@ -36246,7 +36254,7 @@ 1 2 - 504260704 + 504255988 @@ -36262,7 +36270,7 @@ 1 2 - 504260704 + 504255988 @@ -36278,7 +36286,7 @@ 1 2 - 504260704 + 504255988 @@ -36522,47 +36530,47 @@ 1 2 - 352005 + 352001 2 3 - 5788 + 5787 3 4 - 466938 + 466933 4 5 - 116203 + 116201 5 6 - 205090 + 205088 6 15 - 83276 + 83275 15 16 - 145172 + 145171 16 20 - 144670 + 144669 20 126 - 127395 + 127393 126 @@ -36583,42 +36591,42 @@ 1 2 - 713164 + 713158 2 3 - 246078 + 246076 3 4 - 152584 + 152583 4 7 - 101880 + 101879 7 9 - 152496 + 152494 9 11 - 130052 + 130051 11 29 - 129462 + 129461 29 177 - 71493 + 71492 @@ -36634,47 +36642,47 @@ 1 2 - 352005 + 352001 2 3 - 5788 + 5787 3 4 - 466938 + 466933 4 5 - 116203 + 116201 5 6 - 205090 + 205088 6 15 - 83276 + 83275 15 16 - 145172 + 145171 16 20 - 144670 + 144669 20 126 - 127395 + 127393 126 @@ -36695,57 +36703,57 @@ 1 3 - 1768175 + 1768159 3 4 - 5292243 + 5292193 4 5 - 2487040 + 2487016 5 6 - 1620227 + 1620212 6 8 - 1895748 + 1895730 8 11 - 1892411 + 1892393 11 16 - 1968659 + 1968640 16 23 - 1813062 + 1813045 23 35 - 1856944 + 1856927 35 67 - 1825790 + 1825773 67 57474 - 1558597 + 1558582 @@ -36761,52 +36769,52 @@ 1 3 - 1771808 + 1771791 3 4 - 5485048 + 5484997 4 5 - 2836594 + 2836567 5 6 - 2484441 + 2484418 6 7 - 1600973 + 1600958 7 9 - 2124669 + 2124649 9 12 - 2168581 + 2168561 12 16 - 2034335 + 2034316 16 24 - 1878207 + 1878189 24 77 - 1594240 + 1594225 @@ -36822,57 +36830,57 @@ 1 3 - 1768175 + 1768159 3 4 - 5292243 + 5292193 4 5 - 2487040 + 2487016 5 6 - 1620227 + 1620212 6 8 - 1895748 + 1895730 8 11 - 1892411 + 1892393 11 16 - 1968659 + 1968640 16 23 - 1813062 + 1813045 23 35 - 1856944 + 1856927 35 67 - 1825790 + 1825773 67 57474 - 1558597 + 1558582 @@ -36882,15 +36890,15 @@ cil_jump - 38654205 + 38653843 instruction - 38654205 + 38653843 target - 29345826 + 29345551 @@ -36904,7 +36912,7 @@ 1 2 - 38654205 + 38653843 @@ -36920,17 +36928,17 @@ 1 2 - 24482485 + 24482256 2 3 - 3200027 + 3199997 3 473 - 1663312 + 1663297 @@ -36940,15 +36948,15 @@ cil_access - 205357557 + 205355636 instruction - 205357557 + 205355636 target - 48924367 + 48923909 @@ -36962,7 +36970,7 @@ 1 2 - 205357557 + 205355636 @@ -36978,32 +36986,32 @@ 1 2 - 20166732 + 20166543 2 3 - 12282703 + 12282589 3 4 - 5954349 + 5954293 4 5 - 3067877 + 3067849 5 8 - 4125074 + 4125035 8 72956 - 3327629 + 3327598 @@ -37013,15 +37021,15 @@ cil_value - 19775953 + 19775768 instruction - 19775953 + 19775768 value - 4923700 + 4923654 @@ -37035,7 +37043,7 @@ 1 2 - 19775953 + 19775768 @@ -37051,22 +37059,22 @@ 1 2 - 3687282 + 3687248 2 3 - 676753 + 676747 3 7 - 372292 + 372289 7 182148 - 187371 + 187370 @@ -37076,19 +37084,19 @@ cil_switch - 4070472 + 4070434 instruction - 272685 + 272683 index - 141510 + 141509 target - 1795403 + 1795386 @@ -37107,17 +37115,17 @@ 3 4 - 75037 + 75036 4 5 - 45979 + 45978 5 6 - 32454 + 32453 6 @@ -37168,12 +37176,12 @@ 2 3 - 33340 + 33339 3 4 - 96919 + 96918 4 @@ -37219,7 +37227,7 @@ 6 7 - 70489 + 70488 7 @@ -37234,7 +37242,7 @@ 15 655 - 10631 + 10630 688 @@ -37260,7 +37268,7 @@ 6 7 - 70489 + 70488 7 @@ -37275,7 +37283,7 @@ 15 645 - 10631 + 10630 675 @@ -37296,12 +37304,12 @@ 1 2 - 1771690 + 1771673 2 18 - 23713 + 23712 @@ -37317,12 +37325,12 @@ 1 2 - 1596219 + 1596204 2 6 - 141422 + 141420 6 @@ -37379,15 +37387,15 @@ cil_type_location - 4842462 + 4842416 id - 4842462 + 4842416 loc - 14588 + 14587 @@ -37401,7 +37409,7 @@ 1 2 - 4842462 + 4842416 @@ -37477,11 +37485,11 @@ cil_method_location - 29356250 + 29355975 id - 29356250 + 29355975 loc @@ -37499,7 +37507,7 @@ 1 2 - 29356250 + 29355975 @@ -37590,15 +37598,15 @@ cil_type - 12399763 + 12399647 id - 12399763 + 12399647 name - 3497607 + 3497574 kind @@ -37606,11 +37614,11 @@ parent - 2509483 + 2509459 sourceDecl - 6934884 + 6934819 @@ -37624,7 +37632,7 @@ 1 2 - 12399763 + 12399647 @@ -37640,7 +37648,7 @@ 1 2 - 12399763 + 12399647 @@ -37656,7 +37664,7 @@ 1 2 - 12399763 + 12399647 @@ -37672,7 +37680,7 @@ 1 2 - 12399763 + 12399647 @@ -37688,17 +37696,17 @@ 1 2 - 3073163 + 3073135 2 4 - 292855 + 292852 4 45085 - 131588 + 131587 @@ -37714,7 +37722,7 @@ 1 2 - 3497607 + 3497574 @@ -37730,12 +37738,12 @@ 1 2 - 3232334 + 3232303 2 48 - 262409 + 262406 48 @@ -37756,17 +37764,17 @@ 1 2 - 3194150 + 3194121 2 5 - 271947 + 271945 5 45085 - 31509 + 31508 @@ -37921,27 +37929,27 @@ 1 2 - 1632423 + 1632408 2 3 - 460795 + 460791 3 5 - 196792 + 196790 5 28 - 189025 + 189023 28 56074 - 30446 + 30445 @@ -37957,22 +37965,22 @@ 1 2 - 1641164 + 1641149 2 3 - 468149 + 468144 3 5 - 196821 + 196819 5 38 - 188671 + 188669 38 @@ -37993,12 +38001,12 @@ 1 2 - 2470739 + 2470716 2 4 - 38744 + 38743 @@ -38014,22 +38022,22 @@ 1 2 - 1640633 + 1640617 2 3 - 467971 + 467967 3 5 - 196821 + 196819 5 38 - 188700 + 188698 38 @@ -38050,12 +38058,12 @@ 1 2 - 6636063 + 6636001 2 23276 - 298820 + 298817 @@ -38071,7 +38079,7 @@ 1 2 - 6934884 + 6934819 @@ -38087,7 +38095,7 @@ 1 2 - 6934884 + 6934819 @@ -38103,12 +38111,12 @@ 1 2 - 6836960 + 6836896 2 1652 - 97923 + 97922 @@ -38166,15 +38174,15 @@ cil_array_type - 181790 + 181788 id - 181790 + 181788 element_type - 181199 + 181198 rank @@ -38192,7 +38200,7 @@ 1 2 - 181790 + 181788 @@ -38208,7 +38216,7 @@ 1 2 - 181790 + 181788 @@ -38224,7 +38232,7 @@ 1 2 - 180668 + 180666 2 @@ -38245,7 +38253,7 @@ 1 2 - 180668 + 180666 2 @@ -38385,23 +38393,23 @@ cil_method - 39373777 + 39373409 id - 39373777 + 39373409 name - 7889520 + 7889447 parent - 7602010 + 7601939 return_type - 3365930 + 3365899 @@ -38415,7 +38423,7 @@ 1 2 - 39373777 + 39373409 @@ -38431,7 +38439,7 @@ 1 2 - 39373777 + 39373409 @@ -38447,7 +38455,7 @@ 1 2 - 39373777 + 39373409 @@ -38463,27 +38471,27 @@ 1 2 - 5260940 + 5260891 2 3 - 1204170 + 1204159 3 5 - 695180 + 695174 5 19 - 592856 + 592851 19 206309 - 136372 + 136371 @@ -38499,22 +38507,22 @@ 1 2 - 5492194 + 5492143 2 3 - 1123167 + 1123157 3 5 - 645244 + 645238 5 48 - 591941 + 591935 48 @@ -38535,17 +38543,17 @@ 1 2 - 7115788 + 7115722 2 5 - 616717 + 616711 5 10798 - 157014 + 157012 @@ -38561,37 +38569,37 @@ 1 2 - 2404058 + 2404036 2 3 - 1743783 + 1743767 3 4 - 872216 + 872208 4 5 - 624395 + 624389 5 7 - 648758 + 648752 7 11 - 655048 + 655042 11 39 - 572894 + 572888 39 @@ -38612,37 +38620,37 @@ 1 2 - 2458365 + 2458342 2 3 - 1772487 + 1772470 3 4 - 893892 + 893883 4 5 - 633550 + 633544 5 7 - 698104 + 698097 7 11 - 599442 + 599436 11 3640 - 546168 + 546163 @@ -38658,32 +38666,32 @@ 1 2 - 3242994 + 3242964 2 3 - 2011094 + 2011076 3 4 - 858366 + 858358 4 5 - 456927 + 456923 5 7 - 614059 + 614054 7 12757 - 418567 + 418563 @@ -38699,27 +38707,27 @@ 1 2 - 2033124 + 2033105 2 3 - 586123 + 586118 3 4 - 222572 + 222570 4 8 - 285561 + 285558 8 508819 - 238548 + 238546 @@ -38735,22 +38743,22 @@ 1 2 - 2303713 + 2303692 2 3 - 542595 + 542590 3 5 - 273778 + 273775 5 78481 - 245842 + 245840 @@ -38766,27 +38774,27 @@ 1 2 - 2200592 + 2200572 2 3 - 562588 + 562582 3 4 - 209874 + 209872 4 9 - 261818 + 261816 9 207300 - 131056 + 131055 @@ -38796,15 +38804,15 @@ cil_method_source_declaration - 34929152 + 34928825 method - 34929152 + 34928825 source - 30419382 + 30419098 @@ -38818,7 +38826,7 @@ 1 2 - 34929152 + 34928825 @@ -38834,12 +38842,12 @@ 1 2 - 28648401 + 28648133 2 981 - 1770981 + 1770964 @@ -38849,15 +38857,15 @@ cil_method_implementation - 27073001 + 27072747 id - 27073001 + 27072747 method - 27049967 + 27049714 location @@ -38875,7 +38883,7 @@ 1 2 - 27073001 + 27072747 @@ -38891,7 +38899,7 @@ 1 2 - 27073001 + 27072747 @@ -38907,12 +38915,12 @@ 1 2 - 27047073 + 27046820 2 27 - 2894 + 2893 @@ -38928,7 +38936,7 @@ 1 2 - 27049967 + 27049714 @@ -39090,15 +39098,15 @@ cil_implements - 1403915 + 1403902 id - 1403325 + 1403311 decl - 259544 + 259542 @@ -39112,7 +39120,7 @@ 1 2 - 1402734 + 1402721 2 @@ -39133,12 +39141,12 @@ 1 2 - 169860 + 169858 2 3 - 42701 + 42700 3 @@ -39148,12 +39156,12 @@ 4 10 - 19815 + 19814 10 3161 - 10129 + 10128 @@ -39163,23 +39171,23 @@ cil_field - 15899467 + 15899318 id - 15899467 + 15899318 parent - 3685983 + 3685949 name - 6243572 + 6243513 field_type - 3062916 + 3062888 @@ -39193,7 +39201,7 @@ 1 2 - 15899467 + 15899318 @@ -39209,7 +39217,7 @@ 1 2 - 15899467 + 15899318 @@ -39225,7 +39233,7 @@ 1 2 - 15899467 + 15899318 @@ -39241,42 +39249,42 @@ 1 2 - 1083833 + 1083822 2 3 - 913352 + 913344 3 4 - 486546 + 486542 4 5 - 328173 + 328170 5 6 - 220977 + 220975 6 8 - 262556 + 262554 8 15 - 285797 + 285794 15 6824 - 104745 + 104744 @@ -39292,42 +39300,42 @@ 1 2 - 1083833 + 1083822 2 3 - 913352 + 913344 3 4 - 486546 + 486542 4 5 - 328173 + 328170 5 6 - 220977 + 220975 6 8 - 262556 + 262554 8 15 - 285797 + 285794 15 6824 - 104745 + 104744 @@ -39343,32 +39351,32 @@ 1 2 - 1248614 + 1248602 2 3 - 1218965 + 1218953 3 4 - 465934 + 465929 4 5 - 247702 + 247700 5 8 - 323921 + 323918 8 524 - 180845 + 180843 @@ -39384,22 +39392,22 @@ 1 2 - 4788627 + 4788582 2 3 - 792897 + 792889 3 8 - 498152 + 498147 8 13940 - 163894 + 163893 @@ -39415,22 +39423,22 @@ 1 2 - 4788627 + 4788582 2 3 - 792897 + 792889 3 8 - 498152 + 498147 8 13940 - 163894 + 163893 @@ -39446,17 +39454,17 @@ 1 2 - 5453746 + 5453695 2 3 - 488968 + 488963 3 12921 - 300858 + 300855 @@ -39472,27 +39480,27 @@ 1 2 - 1844158 + 1844140 2 3 - 591203 + 591197 3 4 - 171750 + 171748 4 7 - 244247 + 244245 7 58308 - 211557 + 211555 @@ -39508,22 +39516,22 @@ 1 2 - 2063098 + 2063079 2 3 - 593654 + 593648 3 6 - 251807 + 251805 6 22697 - 154356 + 154355 @@ -39539,22 +39547,22 @@ 1 2 - 2244002 + 2243981 2 3 - 356316 + 356313 3 5 - 237987 + 237985 5 33056 - 224609 + 224607 @@ -39564,15 +39572,15 @@ cil_parameter - 75119038 + 75118336 id - 75119038 + 75118336 parameterizable - 37743421 + 37743068 index @@ -39580,7 +39588,7 @@ param_type - 9706924 + 9706833 @@ -39594,7 +39602,7 @@ 1 2 - 75119038 + 75118336 @@ -39610,7 +39618,7 @@ 1 2 - 75119038 + 75118336 @@ -39626,7 +39634,7 @@ 1 2 - 75119038 + 75118336 @@ -39642,27 +39650,27 @@ 1 2 - 16498466 + 16498312 2 3 - 12068636 + 12068523 3 4 - 5792078 + 5792024 4 7 - 2932037 + 2932009 7 57 - 452202 + 452198 @@ -39678,27 +39686,27 @@ 1 2 - 16498466 + 16498312 2 3 - 12068636 + 12068523 3 4 - 5792078 + 5792024 4 7 - 2932037 + 2932009 7 57 - 452202 + 452198 @@ -39714,22 +39722,22 @@ 1 2 - 16985988 + 16985829 2 3 - 12300274 + 12300159 3 4 - 5685768 + 5685715 4 43 - 2771390 + 2771364 @@ -39928,42 +39936,42 @@ 1 2 - 2729575 + 2729549 2 3 - 2863142 + 2863115 3 4 - 1063663 + 1063653 4 5 - 653955 + 653949 5 7 - 740805 + 740798 7 11 - 735224 + 735217 11 36 - 733481 + 733474 36 108909 - 187076 + 187074 @@ -39979,42 +39987,42 @@ 1 2 - 2768466 + 2768441 2 3 - 2861370 + 2861343 3 4 - 1055365 + 1055355 4 5 - 645096 + 645090 5 7 - 739919 + 739912 7 11 - 731916 + 731909 11 37 - 728668 + 728661 37 89965 - 176120 + 176119 @@ -40030,17 +40038,17 @@ 1 2 - 6826329 + 6826265 2 3 - 2083267 + 2083248 3 6 - 729111 + 729104 6 @@ -40055,37 +40063,37 @@ cil_parameter_in - 358354 + 358350 id - 358354 + 358350 cil_parameter_out - 683899 + 683893 id - 683899 + 683893 cil_setter - 1074353 + 1074343 prop - 1074353 + 1074343 method - 1074353 + 1074343 @@ -40099,7 +40107,7 @@ 1 2 - 1074353 + 1074343 @@ -40115,7 +40123,7 @@ 1 2 - 1074353 + 1074343 @@ -40125,11 +40133,11 @@ cil_custom_modifiers - 217995 + 217993 id - 197796 + 197794 modifier @@ -40151,7 +40159,7 @@ 1 2 - 177744 + 177743 2 @@ -40172,12 +40180,12 @@ 1 2 - 196349 + 196347 2 3 - 1447 + 1446 @@ -40341,11 +40349,11 @@ cil_type_annotation - 1751904 + 1751888 id - 1751904 + 1751888 annotation @@ -40363,7 +40371,7 @@ 1 2 - 1751904 + 1751888 @@ -40389,15 +40397,15 @@ cil_getter - 5994363 + 5994307 prop - 5994363 + 5994307 method - 5994363 + 5994307 @@ -40411,7 +40419,7 @@ 1 2 - 5994363 + 5994307 @@ -40427,7 +40435,7 @@ 1 2 - 5994363 + 5994307 @@ -40437,15 +40445,15 @@ cil_adder - 70696 + 70695 event - 70696 + 70695 method - 70873 + 70872 @@ -40459,7 +40467,7 @@ 1 2 - 70696 + 70695 @@ -40475,7 +40483,7 @@ 1 2 - 70873 + 70872 @@ -40485,15 +40493,15 @@ cil_remover - 70696 + 70695 event - 70696 + 70695 method - 70873 + 70872 @@ -40507,7 +40515,7 @@ 1 2 - 70696 + 70695 @@ -40523,7 +40531,7 @@ 1 2 - 70873 + 70872 @@ -40581,23 +40589,23 @@ cil_property - 6002749 + 6002693 id - 6002749 + 6002693 parent - 1591435 + 1591420 name - 1540967 + 1540952 property_type - 706667 + 706661 @@ -40611,7 +40619,7 @@ 1 2 - 6002749 + 6002693 @@ -40627,7 +40635,7 @@ 1 2 - 6002749 + 6002693 @@ -40643,7 +40651,7 @@ 1 2 - 6002749 + 6002693 @@ -40659,32 +40667,32 @@ 1 2 - 521629 + 521624 2 3 - 392402 + 392399 3 4 - 215484 + 215482 4 5 - 137258 + 137257 5 7 - 139502 + 139501 7 13 - 124442 + 124440 13 @@ -40705,37 +40713,37 @@ 1 2 - 624838 + 624832 2 3 - 291408 + 291405 3 4 - 215544 + 215542 4 5 - 136520 + 136518 5 7 - 139738 + 139737 7 13 - 124087 + 124086 13 2090 - 59297 + 59296 @@ -40751,27 +40759,27 @@ 1 2 - 615625 + 615619 2 3 - 481851 + 481846 3 4 - 202137 + 202135 4 5 - 101053 + 101052 5 8 - 125268 + 125267 8 @@ -40792,27 +40800,27 @@ 1 2 - 979206 + 979196 2 3 - 254760 + 254758 3 4 - 95118 + 95117 4 8 - 120248 + 120247 8 7161 - 91633 + 91632 @@ -40828,27 +40836,27 @@ 1 2 - 979206 + 979196 2 3 - 255203 + 255201 3 4 - 95177 + 95176 4 8 - 120219 + 120218 8 3695 - 91161 + 91160 @@ -40864,17 +40872,17 @@ 1 2 - 1346862 + 1346849 2 3 - 113161 + 113160 3 1330 - 80943 + 80942 @@ -40890,17 +40898,17 @@ 1 2 - 410209 + 410206 2 3 - 125239 + 125238 3 4 - 46038 + 46037 4 @@ -40910,7 +40918,7 @@ 7 34 - 53096 + 53095 34 @@ -40931,12 +40939,12 @@ 1 2 - 430172 + 430168 2 3 - 118831 + 118830 3 @@ -40951,12 +40959,12 @@ 7 64 - 53007 + 53006 64 17546 - 4843 + 4842 @@ -40972,12 +40980,12 @@ 1 2 - 559812 + 559806 2 3 - 81534 + 81533 3 @@ -40997,15 +41005,15 @@ cil_event - 70696 + 70695 id - 70696 + 70695 parent - 30062 + 30061 name @@ -41013,7 +41021,7 @@ event_type - 21380 + 21379 @@ -41027,7 +41035,7 @@ 1 2 - 70696 + 70695 @@ -41043,7 +41051,7 @@ 1 2 - 70696 + 70695 @@ -41059,7 +41067,7 @@ 1 2 - 70696 + 70695 @@ -41075,7 +41083,7 @@ 1 2 - 16478 + 16477 2 @@ -41116,7 +41124,7 @@ 1 2 - 16478 + 16477 2 @@ -41157,7 +41165,7 @@ 1 2 - 19815 + 19814 2 @@ -41265,7 +41273,7 @@ 1 2 - 30121 + 30120 2 @@ -41296,7 +41304,7 @@ 2 3 - 4341 + 4340 3 @@ -41378,15 +41386,15 @@ cil_local_variable - 23026507 + 23026292 id - 23026507 + 23026292 impl - 6649736 + 6649674 index @@ -41394,7 +41402,7 @@ var_type - 2957964 + 2957937 @@ -41408,7 +41416,7 @@ 1 2 - 23026507 + 23026292 @@ -41424,7 +41432,7 @@ 1 2 - 23026507 + 23026292 @@ -41440,7 +41448,7 @@ 1 2 - 23026507 + 23026292 @@ -41456,37 +41464,37 @@ 1 2 - 2714986 + 2714961 2 3 - 1154972 + 1154961 3 4 - 783477 + 783469 4 5 - 524995 + 524990 5 6 - 385197 + 385193 6 9 - 558778 + 558773 9 29 - 498801 + 498797 29 @@ -41507,37 +41515,37 @@ 1 2 - 2714986 + 2714961 2 3 - 1154972 + 1154961 3 4 - 783477 + 783469 4 5 - 524995 + 524990 5 6 - 385197 + 385193 6 9 - 558778 + 558773 9 29 - 498801 + 498797 29 @@ -41558,37 +41566,37 @@ 1 2 - 2973084 + 2973056 2 3 - 1271618 + 1271606 3 4 - 818854 + 818847 4 5 - 500130 + 500126 5 7 - 537339 + 537334 7 16 - 498831 + 498826 16 163 - 49877 + 49876 @@ -41762,27 +41770,27 @@ 1 2 - 1877350 + 1877333 2 3 - 375954 + 375950 3 4 - 175411 + 175410 4 7 - 232849 + 232846 7 29 - 223664 + 223662 29 @@ -41803,27 +41811,27 @@ 1 2 - 1959652 + 1959634 2 3 - 358679 + 358675 3 5 - 267754 + 267751 5 12 - 222070 + 222068 12 44190 - 149808 + 149807 @@ -41839,27 +41847,27 @@ 1 2 - 2018536 + 2018517 2 3 - 391103 + 391099 3 4 - 185275 + 185273 4 8 - 239434 + 239432 8 217 - 123615 + 123614 @@ -41869,11 +41877,11 @@ cil_function_pointer_calling_conventions - 39912 + 39911 id - 39912 + 39911 kind @@ -41891,7 +41899,7 @@ 1 2 - 39912 + 39911 @@ -41922,15 +41930,15 @@ cil_handler - 2378514 + 2378492 id - 2378514 + 2378492 impl - 1552395 + 1552381 index @@ -41942,15 +41950,15 @@ try_start - 2323145 + 2323123 try_end - 2349486 + 2349464 handler_start - 2378514 + 2378492 @@ -41964,7 +41972,7 @@ 1 2 - 2378514 + 2378492 @@ -41980,7 +41988,7 @@ 1 2 - 2378514 + 2378492 @@ -41996,7 +42004,7 @@ 1 2 - 2378514 + 2378492 @@ -42012,7 +42020,7 @@ 1 2 - 2378514 + 2378492 @@ -42028,7 +42036,7 @@ 1 2 - 2378514 + 2378492 @@ -42044,7 +42052,7 @@ 1 2 - 2378514 + 2378492 @@ -42060,22 +42068,22 @@ 1 2 - 1142805 + 1142795 2 3 - 247407 + 247405 3 5 - 119658 + 119656 5 83 - 42524 + 42523 @@ -42091,22 +42099,22 @@ 1 2 - 1142805 + 1142795 2 3 - 247407 + 247405 3 5 - 119658 + 119656 5 83 - 42524 + 42523 @@ -42122,12 +42130,12 @@ 1 2 - 1453556 + 1453543 2 4 - 98839 + 98838 @@ -42143,17 +42151,17 @@ 1 2 - 1161321 + 1161310 2 3 - 240615 + 240613 3 6 - 125918 + 125917 6 @@ -42174,22 +42182,22 @@ 1 2 - 1153171 + 1153160 2 3 - 244070 + 244068 3 6 - 128989 + 128988 6 83 - 26164 + 26163 @@ -42205,22 +42213,22 @@ 1 2 - 1142805 + 1142795 2 3 - 247407 + 247405 3 5 - 119658 + 119656 5 83 - 42524 + 42523 @@ -42758,12 +42766,12 @@ 1 2 - 2279616 + 2279595 2 9 - 43528 + 43527 @@ -42779,7 +42787,7 @@ 1 2 - 2323145 + 2323123 @@ -42795,12 +42803,12 @@ 1 2 - 2279616 + 2279595 2 9 - 43528 + 43527 @@ -42816,7 +42824,7 @@ 1 2 - 2305987 + 2305966 2 @@ -42837,7 +42845,7 @@ 1 2 - 2299727 + 2299705 2 @@ -42858,12 +42866,12 @@ 1 2 - 2279616 + 2279595 2 9 - 43528 + 43527 @@ -42879,7 +42887,7 @@ 1 2 - 2326836 + 2326814 2 @@ -42900,7 +42908,7 @@ 1 2 - 2349486 + 2349464 @@ -42916,7 +42924,7 @@ 1 2 - 2326836 + 2326814 2 @@ -42937,7 +42945,7 @@ 1 2 - 2347537 + 2347515 2 @@ -42958,7 +42966,7 @@ 1 2 - 2349486 + 2349464 @@ -42974,7 +42982,7 @@ 1 2 - 2326836 + 2326814 2 @@ -42995,7 +43003,7 @@ 1 2 - 2378514 + 2378492 @@ -43011,7 +43019,7 @@ 1 2 - 2378514 + 2378492 @@ -43027,7 +43035,7 @@ 1 2 - 2378514 + 2378492 @@ -43043,7 +43051,7 @@ 1 2 - 2378514 + 2378492 @@ -43059,7 +43067,7 @@ 1 2 - 2378514 + 2378492 @@ -43075,7 +43083,7 @@ 1 2 - 2378514 + 2378492 @@ -43133,11 +43141,11 @@ cil_handler_type - 400819 + 400815 id - 400819 + 400815 catch_type @@ -43155,7 +43163,7 @@ 1 2 - 400819 + 400815 @@ -43216,11 +43224,11 @@ cil_method_stack_size - 27072292 + 27072039 method - 27072292 + 27072039 size @@ -43238,7 +43246,7 @@ 1 2 - 27072292 + 27072039 @@ -43309,121 +43317,121 @@ cil_public - 30557526 + 30557240 id - 30557526 + 30557240 cil_private - 15498766 + 15498621 id - 15498766 + 15498621 cil_protected - 28744228 + 28743959 id - 28744228 + 28743959 cil_internal - 986884 + 986874 id - 986884 + 986874 cil_static - 14521686 + 14521550 id - 14521686 + 14521550 cil_sealed - 6359922 + 6359863 id - 6359922 + 6359863 cil_virtual - 11734704 + 11734594 id - 11734704 + 11734594 cil_abstract - 2826199 + 2826172 id - 2826199 + 2826172 cil_class - 4475041 + 4475000 id - 4475041 + 4475000 cil_interface - 367479 + 367475 id - 367479 + 367475 cil_security - 48814 + 48813 id - 48814 + 48813 @@ -43441,37 +43449,37 @@ cil_specialname - 12520543 + 12520426 id - 12520543 + 12520426 cil_newslot - 7370933 + 7370864 id - 7370933 + 7370864 cil_base_class - 4460424 + 4460382 id - 4460424 + 4460382 base - 462242 + 462238 @@ -43485,7 +43493,7 @@ 1 2 - 4460424 + 4460382 @@ -43501,12 +43509,12 @@ 1 2 - 280600 + 280597 2 3 - 90068 + 90067 3 @@ -43516,7 +43524,7 @@ 4 8 - 38242 + 38241 8 @@ -43531,15 +43539,15 @@ cil_base_interface - 2925894 + 2925867 id - 1244479 + 1244468 base - 538638 + 538633 @@ -43553,32 +43561,32 @@ 1 2 - 703478 + 703472 2 3 - 199095 + 199093 3 4 - 95531 + 95530 4 5 - 46540 + 46539 5 6 - 123792 + 123791 6 32 - 76041 + 76040 @@ -43594,7 +43602,7 @@ 1 2 - 358649 + 358646 2 @@ -43604,12 +43612,12 @@ 3 4 - 31834 + 31833 4 8 - 43203 + 43202 8 @@ -43629,11 +43637,11 @@ cil_enum_underlying_type - 203849 + 203848 id - 203849 + 203848 underlying @@ -43651,7 +43659,7 @@ 1 2 - 203849 + 203848 @@ -43712,11 +43720,11 @@ cil_type_parameter - 1773609 + 1773592 unbound - 1331358 + 1331346 index @@ -43724,7 +43732,7 @@ param - 1773609 + 1773592 @@ -43738,17 +43746,17 @@ 1 2 - 994443 + 994434 2 3 - 282460 + 282457 3 43 - 54454 + 54453 @@ -43764,17 +43772,17 @@ 1 2 - 994443 + 994434 2 3 - 282460 + 282457 3 43 - 54454 + 54453 @@ -43912,7 +43920,7 @@ 1 2 - 1773609 + 1773592 @@ -43928,7 +43936,7 @@ 1 2 - 1773609 + 1773592 @@ -43938,11 +43946,11 @@ cil_type_argument - 11206076 + 11205971 bound - 8383213 + 8383135 index @@ -43950,7 +43958,7 @@ t - 2800094 + 2800068 @@ -43964,17 +43972,17 @@ 1 2 - 5919148 + 5919093 2 3 - 2202955 + 2202934 3 43 - 261109 + 261107 @@ -43990,17 +43998,17 @@ 1 2 - 6030449 + 6030393 2 3 - 2159013 + 2158993 3 43 - 193750 + 193748 @@ -44133,32 +44141,32 @@ 1 2 - 1210194 + 1210183 2 3 - 732418 + 732411 3 4 - 295483 + 295480 4 6 - 237455 + 237453 6 12 - 215160 + 215158 12 14769 - 109381 + 109380 @@ -44174,17 +44182,17 @@ 1 2 - 2254043 + 2254022 2 3 - 502079 + 502075 3 10 - 43971 + 43970 @@ -44285,19 +44293,19 @@ cil_attribute - 5874527 + 5874473 attributeid - 5874527 + 5874473 element - 5184131 + 5184082 constructor - 27995 + 27994 @@ -44311,7 +44319,7 @@ 1 2 - 5874527 + 5874473 @@ -44327,7 +44335,7 @@ 1 2 - 5874527 + 5874473 @@ -44343,12 +44351,12 @@ 1 2 - 4807940 + 4807895 2 3520 - 376190 + 376187 @@ -44364,12 +44372,12 @@ 1 2 - 4812458 + 4812413 2 9 - 371672 + 371669 @@ -44521,11 +44529,11 @@ cil_attribute_named_argument - 261818 + 261816 attribute_id - 161089 + 161088 param @@ -44533,7 +44541,7 @@ value - 119569 + 119568 @@ -44547,7 +44555,7 @@ 1 2 - 97510 + 97509 2 @@ -44562,7 +44570,7 @@ 4 6 - 12137 + 12136 7 @@ -44583,7 +44591,7 @@ 1 2 - 103711 + 103710 2 @@ -44746,7 +44754,7 @@ 1 2 - 101171 + 101170 2 @@ -44772,7 +44780,7 @@ 1 2 - 112925 + 112924 2 @@ -44787,11 +44795,11 @@ cil_attribute_positional_argument - 1757367 + 1757351 attribute_id - 1528150 + 1528136 index @@ -44799,7 +44807,7 @@ value - 440478 + 440474 @@ -44813,12 +44821,12 @@ 1 2 - 1317006 + 1316994 2 3 - 194104 + 194103 3 @@ -44839,12 +44847,12 @@ 1 2 - 1318276 + 1318264 2 3 - 194222 + 194221 3 @@ -44932,12 +44940,12 @@ 1 2 - 324925 + 324922 2 3 - 75273 + 75272 3 @@ -44963,7 +44971,7 @@ 1 2 - 400848 + 400845 2 @@ -44983,19 +44991,19 @@ metadata_handle - 109731032 + 109730006 entity - 109393999 + 109392976 location - 14588 + 14587 handle - 2756447 + 2756422 @@ -45009,12 +45017,12 @@ 1 2 - 109222337 + 109221316 2 495 - 171661 + 171659 @@ -45030,12 +45038,12 @@ 1 2 - 109225527 + 109224505 2 104 - 168472 + 168470 @@ -45198,7 +45206,7 @@ 2 3 - 373149 + 373145 3 @@ -45208,57 +45216,57 @@ 4 5 - 360687 + 360683 5 8 - 210051 + 210049 8 11 - 237367 + 237364 11 15 - 233026 + 233024 15 22 - 101939 + 101938 22 25 - 223103 + 223101 25 39 - 216105 + 216103 39 51 - 211143 + 211142 51 73 - 210317 + 210315 73 137 - 207807 + 207805 137 732 - 169801 + 169799 @@ -45274,62 +45282,62 @@ 1 2 - 373651 + 373647 2 3 - 362134 + 362130 3 4 - 205326 + 205324 4 6 - 242092 + 242089 6 8 - 233026 + 233024 8 11 - 101733 + 101732 11 13 - 223192 + 223190 13 20 - 216134 + 216132 20 26 - 210523 + 210521 26 37 - 210996 + 210994 37 70 - 209903 + 209901 70 495 - 167733 + 167732 diff --git a/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/old.dbscheme b/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/old.dbscheme new file mode 100644 index 00000000000..83aca6b3e4f --- /dev/null +++ b/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/old.dbscheme @@ -0,0 +1,2067 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/semmlecode.csharp.dbscheme b/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/semmlecode.csharp.dbscheme new file mode 100644 index 00000000000..d0fba103f7d --- /dev/null +++ b/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/semmlecode.csharp.dbscheme @@ -0,0 +1,2069 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +| 133 = @urshift_expr +| 134 = @assign_urshift_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr | @assign_urshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr | @urshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/upgrade.properties b/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/upgrade.properties new file mode 100644 index 00000000000..25d7416df1c --- /dev/null +++ b/csharp/ql/lib/upgrades/83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2/upgrade.properties @@ -0,0 +1,2 @@ +description: Add unsigned right shift and unsigned right shift assignment expression kinds. +compatibility: backwards diff --git a/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/old.dbscheme b/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/old.dbscheme new file mode 100644 index 00000000000..d0fba103f7d --- /dev/null +++ b/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/old.dbscheme @@ -0,0 +1,2069 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +| 133 = @urshift_expr +| 134 = @assign_urshift_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr | @assign_urshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr | @urshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/semmlecode.csharp.dbscheme b/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/semmlecode.csharp.dbscheme new file mode 100644 index 00000000000..1136957c0b3 --- /dev/null +++ b/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/semmlecode.csharp.dbscheme @@ -0,0 +1,2069 @@ +/* This is a dummy line to alter the dbscheme, so we can make a database upgrade + * without actually changing any of the dbscheme predicates. It contains a date + * to allow for such updates in the future as well. + * + * 2021-07-14 + * + * DO NOT remove this comment carelessly, since it can revert the dbscheme back to a + * previously seen state (matching a previously seen SHA), which would make the upgrade + * mechanism not work properly. + */ + +/** + * An invocation of the compiler. Note that more than one file may be + * compiled per invocation. For example, this command compiles three + * source files: + * + * csc f1.cs f2.cs f3.cs + * + * The `id` simply identifies the invocation, while `cwd` is the working + * directory from which the compiler was invoked. + */ +compilations( + unique int id : @compilation, + string cwd : string ref +); + +/** + * The arguments that were passed to the extractor for a compiler + * invocation. If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then typically there will be rows for + * + * num | arg + * --- | --- + * 0 | --compiler + * 1 | *path to compiler* + * 2 | f1.cs + * 3 | f2.cs + * 4 | f3.cs + */ +#keyset[id, num] +compilation_args( + int id : @compilation ref, + int num : int ref, + string arg : string ref +); + +/** + * The source files that are compiled by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | f1.cs + * 1 | f2.cs + * 2 | f3.cs + */ +#keyset[id, num] +compilation_compiling_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The references used by a compiler invocation. + * If `id` is for the compiler invocation + * + * csc f1.cs f2.cs f3.cs /r:ref1.dll /r:ref2.dll /r:ref3.dll + * + * then there will be rows for + * + * num | arg + * --- | --- + * 0 | ref1.dll + * 1 | ref2.dll + * 2 | ref3.dll + */ +#keyset[id, num] +compilation_referencing_files( + int id : @compilation ref, + int num : int ref, + int file : @file ref +); + +/** + * The time taken by the extractor for a compiler invocation. + * + * For each file `num`, there will be rows for + * + * kind | seconds + * ---- | --- + * 1 | CPU seconds used by the extractor frontend + * 2 | Elapsed seconds during the extractor frontend + * 3 | CPU seconds used by the extractor backend + * 4 | Elapsed seconds during the extractor backend + */ +#keyset[id, num, kind] +compilation_time( + int id : @compilation ref, + int num : int ref, + /* kind: + 1 = frontend_cpu_seconds + 2 = frontend_elapsed_seconds + 3 = extractor_cpu_seconds + 4 = extractor_elapsed_seconds + */ + int kind : int ref, + float seconds : float ref +); + +/** + * An error or warning generated by the extractor. + * The diagnostic message `diagnostic` was generated during compiler + * invocation `compilation`, and is the `file_number_diagnostic_number`th + * message generated while extracting the `file_number`th file of that + * invocation. + */ +#keyset[compilation, file_number, file_number_diagnostic_number] +diagnostic_for( + unique int diagnostic : @diagnostic ref, + int compilation : @compilation ref, + int file_number : int ref, + int file_number_diagnostic_number : int ref +); + +diagnostics( + unique int id: @diagnostic, + int severity: int ref, + string error_tag: string ref, + string error_message: string ref, + string full_error_message: string ref, + int location: @location_default ref +); + +extractor_messages( + unique int id: @extractor_message, + int severity: int ref, + string origin : string ref, + string text : string ref, + string entity : string ref, + int location: @location_default ref, + string stack_trace : string ref +); + +/** + * If extraction was successful, then `cpu_seconds` and + * `elapsed_seconds` are the CPU time and elapsed time (respectively) + * that extraction took for compiler invocation `id`. + */ +compilation_finished( + unique int id : @compilation ref, + float cpu_seconds : float ref, + float elapsed_seconds : float ref +); + +compilation_assembly( + unique int id : @compilation ref, + int assembly: @assembly ref +) + +// Populated by the CSV extractor +externalData( + int id: @externalDataElement, + string path: string ref, + int column: int ref, + string value: string ref); + +sourceLocationPrefix( + string prefix: string ref); + +/* + * C# dbscheme + */ + +/** ELEMENTS **/ + +@element = @declaration | @stmt | @expr | @modifier | @attribute | @namespace_declaration + | @using_directive | @type_parameter_constraints | @externalDataElement + | @xmllocatable | @asp_element | @namespace | @preprocessor_directive; + +@declaration = @callable | @generic | @assignable | @namespace; + +@named_element = @namespace | @declaration; + +@declaration_with_accessors = @property | @indexer | @event; + +@assignable = @variable | @assignable_with_accessors | @event; + +@assignable_with_accessors = @property | @indexer; + +@attributable = @assembly | @field | @parameter | @operator | @method | @constructor + | @destructor | @callable_accessor | @value_or_ref_type | @declaration_with_accessors + | @local_function | @lambda_expr; + +/** LOCATIONS, ASEMMBLIES, MODULES, FILES and FOLDERS **/ + +@location = @location_default | @assembly; + +locations_default( + unique int id: @location_default, + int file: @file ref, + int beginLine: int ref, + int beginColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +locations_mapped( + unique int id: @location_default ref, + int mapped_to: @location_default ref); + +@sourceline = @file | @callable | @xmllocatable; + +numlines( + int element_id: @sourceline ref, + int num_lines: int ref, + int num_code: int ref, + int num_comment: int ref); + +assemblies( + unique int id: @assembly, + int file: @file ref, + string fullname: string ref, + string name: string ref, + string version: string ref); + +files( + unique int id: @file, + string name: string ref); + +folders( + unique int id: @folder, + string name: string ref); + +@container = @folder | @file ; + +containerparent( + int parent: @container ref, + unique int child: @container ref); + +file_extraction_mode( + unique int file: @file ref, + int mode: int ref + /* 0 = normal, 1 = standalone extractor */ + ); + +/** NAMESPACES **/ + +@type_container = @namespace | @type; + +namespaces( + unique int id: @namespace, + string name: string ref); + +namespace_declarations( + unique int id: @namespace_declaration, + int namespace_id: @namespace ref); + +namespace_declaration_location( + unique int id: @namespace_declaration ref, + int loc: @location ref); + +parent_namespace( + unique int child_id: @type_container ref, + int namespace_id: @namespace ref); + +@declaration_or_directive = @namespace_declaration | @type | @using_directive; + +parent_namespace_declaration( + int child_id: @declaration_or_directive ref, // cannot be unique because of partial classes + int namespace_id: @namespace_declaration ref); + +@using_directive = @using_namespace_directive | @using_static_directive; + +using_global( + unique int id: @using_directive ref +); + +using_namespace_directives( + unique int id: @using_namespace_directive, + int namespace_id: @namespace ref); + +using_static_directives( + unique int id: @using_static_directive, + int type_id: @type_or_ref ref); + +using_directive_location( + unique int id: @using_directive ref, + int loc: @location ref); + +@preprocessor_directive = @pragma_warning | @pragma_checksum | @directive_define | @directive_undefine | @directive_warning + | @directive_error | @directive_nullable | @directive_line | @directive_region | @directive_endregion | @directive_if + | @directive_elif | @directive_else | @directive_endif; + +@conditional_directive = @directive_if | @directive_elif; +@branch_directive = @directive_if | @directive_elif | @directive_else; + +directive_ifs( + unique int id: @directive_if, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref); /* 0: false, 1: true */ + +directive_elifs( + unique int id: @directive_elif, + int branchTaken: int ref, /* 0: false, 1: true */ + int conditionValue: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +directive_elses( + unique int id: @directive_else, + int branchTaken: int ref, /* 0: false, 1: true */ + int parent: @directive_if ref, + int index: int ref); + +#keyset[id, start] +directive_endifs( + unique int id: @directive_endif, + unique int start: @directive_if ref); + +directive_define_symbols( + unique int id: @define_symbol_expr ref, + string name: string ref); + +directive_regions( + unique int id: @directive_region, + string name: string ref); + +#keyset[id, start] +directive_endregions( + unique int id: @directive_endregion, + unique int start: @directive_region ref); + +directive_lines( + unique int id: @directive_line, + int kind: int ref); /* 0: default, 1: hidden, 2: numeric, 3: span */ + +directive_line_value( + unique int id: @directive_line ref, + int line: int ref); + +directive_line_file( + unique int id: @directive_line ref, + int file: @file ref); + +directive_line_offset( + unique int id: @directive_line ref, + int offset: int ref); + +directive_line_span( + unique int id: @directive_line ref, + int startLine: int ref, + int startColumn: int ref, + int endLine: int ref, + int endColumn: int ref); + +directive_nullables( + unique int id: @directive_nullable, + int setting: int ref, /* 0: disable, 1: enable, 2: restore */ + int target: int ref); /* 0: none, 1: annotations, 2: warnings */ + +directive_warnings( + unique int id: @directive_warning, + string message: string ref); + +directive_errors( + unique int id: @directive_error, + string message: string ref); + +directive_undefines( + unique int id: @directive_undefine, + string name: string ref); + +directive_defines( + unique int id: @directive_define, + string name: string ref); + +pragma_checksums( + unique int id: @pragma_checksum, + int file: @file ref, + string guid: string ref, + string bytes: string ref); + +pragma_warnings( + unique int id: @pragma_warning, + int kind: int ref /* 0 = disable, 1 = restore */); + +#keyset[id, index] +pragma_warning_error_codes( + int id: @pragma_warning ref, + string errorCode: string ref, + int index: int ref); + +preprocessor_directive_location( + unique int id: @preprocessor_directive ref, + int loc: @location ref); + +preprocessor_directive_compilation( + unique int id: @preprocessor_directive ref, + int compilation: @compilation ref); + +preprocessor_directive_active( + unique int id: @preprocessor_directive ref, + int active: int ref); /* 0: false, 1: true */ + +/** TYPES **/ + +types( + unique int id: @type, + int kind: int ref, + string name: string ref); + +case @type.kind of + 1 = @bool_type +| 2 = @char_type +| 3 = @decimal_type +| 4 = @sbyte_type +| 5 = @short_type +| 6 = @int_type +| 7 = @long_type +| 8 = @byte_type +| 9 = @ushort_type +| 10 = @uint_type +| 11 = @ulong_type +| 12 = @float_type +| 13 = @double_type +| 14 = @enum_type +| 15 = @struct_type +| 17 = @class_type +| 19 = @interface_type +| 20 = @delegate_type +| 21 = @null_type +| 22 = @type_parameter +| 23 = @pointer_type +| 24 = @nullable_type +| 25 = @array_type +| 26 = @void_type +| 27 = @int_ptr_type +| 28 = @uint_ptr_type +| 29 = @dynamic_type +| 30 = @arglist_type +| 31 = @unknown_type +| 32 = @tuple_type +| 33 = @function_pointer_type + ; + +@simple_type = @bool_type | @char_type | @integral_type | @floating_point_type | @decimal_type; +@integral_type = @signed_integral_type | @unsigned_integral_type; +@signed_integral_type = @sbyte_type | @short_type | @int_type | @long_type; +@unsigned_integral_type = @byte_type | @ushort_type | @uint_type | @ulong_type; +@floating_point_type = @float_type | @double_type; +@value_type = @simple_type | @enum_type | @struct_type | @nullable_type | @int_ptr_type + | @uint_ptr_type | @tuple_type; +@ref_type = @class_type | @interface_type | @array_type | @delegate_type | @null_type + | @dynamic_type; +@value_or_ref_type = @value_type | @ref_type; + +typerefs( + unique int id: @typeref, + string name: string ref); + +typeref_type( + int id: @typeref ref, + unique int typeId: @type ref); + +@type_or_ref = @type | @typeref; + +array_element_type( + unique int array: @array_type ref, + int dimension: int ref, + int rank: int ref, + int element: @type_or_ref ref); + +nullable_underlying_type( + unique int nullable: @nullable_type ref, + int underlying: @type_or_ref ref); + +pointer_referent_type( + unique int pointer: @pointer_type ref, + int referent: @type_or_ref ref); + +enum_underlying_type( + unique int enum_id: @enum_type ref, + int underlying_type_id: @type_or_ref ref); + +delegate_return_type( + unique int delegate_id: @delegate_type ref, + int return_type_id: @type_or_ref ref); + +function_pointer_return_type( + unique int function_pointer_id: @function_pointer_type ref, + int return_type_id: @type_or_ref ref); + +extend( + int sub: @type ref, + int super: @type_or_ref ref); + +anonymous_types( + unique int id: @type ref); + +@interface_or_ref = @interface_type | @typeref; + +implement( + int sub: @type ref, + int super: @type_or_ref ref); + +type_location( + int id: @type ref, + int loc: @location ref); + +tuple_underlying_type( + unique int tuple: @tuple_type ref, + int struct: @type_or_ref ref); + +#keyset[tuple, index] +tuple_element( + int tuple: @tuple_type ref, + int index: int ref, + unique int field: @field ref); + +attributes( + unique int id: @attribute, + int kind: int ref, + int type_id: @type_or_ref ref, + int target: @attributable ref); + +case @attribute.kind of + 0 = @attribute_default +| 1 = @attribute_return +| 2 = @attribute_assembly +| 3 = @attribute_module +; + +attribute_location( + int id: @attribute ref, + int loc: @location ref); + +@type_mention_parent = @element | @type_mention; + +type_mention( + unique int id: @type_mention, + int type_id: @type_or_ref ref, + int parent: @type_mention_parent ref); + +type_mention_location( + unique int id: @type_mention ref, + int loc: @location ref); + +@has_type_annotation = @assignable | @type_parameter | @callable | @expr | @delegate_type | @generic | @function_pointer_type; + +/** + * A direct annotation on an entity, for example `string? x;`. + * + * Annotations: + * 2 = reftype is not annotated "!" + * 3 = reftype is annotated "?" + * 4 = readonly ref type / in parameter + * 5 = ref type parameter, return or local variable + * 6 = out parameter + * + * Note that the annotation depends on the element it annotates. + * @assignable: The annotation is on the type of the assignable, for example the variable type. + * @type_parameter: The annotation is on the reftype constraint + * @callable: The annotation is on the return type + * @array_type: The annotation is on the element type + */ +type_annotation(int id: @has_type_annotation ref, int annotation: int ref); + +nullability(unique int nullability: @nullability, int kind: int ref); + +case @nullability.kind of + 0 = @oblivious +| 1 = @not_annotated +| 2 = @annotated +; + +#keyset[parent, index] +nullability_parent(int nullability: @nullability ref, int index: int ref, int parent: @nullability ref) + +type_nullability(int id: @has_type_annotation ref, int nullability: @nullability ref); + +/** + * The nullable flow state of an expression, as determined by Roslyn. + * 0 = none (default, not populated) + * 1 = not null + * 2 = maybe null + */ +expr_flowstate(unique int id: @expr ref, int state: int ref); + +/** GENERICS **/ + +@generic = @type | @method | @local_function; + +type_parameters( + unique int id: @type_parameter ref, + int index: int ref, + int generic_id: @generic ref, + int variance: int ref /* none = 0, out = 1, in = 2 */); + +#keyset[constructed_id, index] +type_arguments( + int id: @type_or_ref ref, + int index: int ref, + int constructed_id: @generic_or_ref ref); + +@generic_or_ref = @generic | @typeref; + +constructed_generic( + unique int constructed: @generic ref, + int generic: @generic_or_ref ref); + +type_parameter_constraints( + unique int id: @type_parameter_constraints, + int param_id: @type_parameter ref); + +type_parameter_constraints_location( + int id: @type_parameter_constraints ref, + int loc: @location ref); + +general_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int kind: int ref /* class = 1, struct = 2, new = 3 */); + +specific_type_parameter_constraints( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref); + +specific_type_parameter_nullability( + int id: @type_parameter_constraints ref, + int base_id: @type_or_ref ref, + int nullability: @nullability ref); + +/** FUNCTION POINTERS */ + +function_pointer_calling_conventions( + int id: @function_pointer_type ref, + int kind: int ref); + +#keyset[id, index] +has_unmanaged_calling_conventions( + int id: @function_pointer_type ref, + int index: int ref, + int conv_id: @type_or_ref ref); + +/** MODIFIERS */ + +@modifiable = @modifiable_direct | @event_accessor; + +@modifiable_direct = @member | @accessor | @local_function | @anonymous_function_expr; + +modifiers( + unique int id: @modifier, + string name: string ref); + +has_modifiers( + int id: @modifiable_direct ref, + int mod_id: @modifier ref); + +compiler_generated(unique int id: @modifiable ref); + +/** MEMBERS **/ + +@member = @method | @constructor | @destructor | @field | @property | @event | @operator | @indexer | @type; + +@named_exprorstmt = @goto_stmt | @labeled_stmt | @expr; + +@virtualizable = @method | @property | @indexer | @event | @operator; + +exprorstmt_name( + unique int parent_id: @named_exprorstmt ref, + string name: string ref); + +nested_types( + unique int id: @type ref, + int declaring_type_id: @type ref, + int unbound_id: @type ref); + +properties( + unique int id: @property, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @property ref); + +property_location( + int id: @property ref, + int loc: @location ref); + +indexers( + unique int id: @indexer, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @indexer ref); + +indexer_location( + int id: @indexer ref, + int loc: @location ref); + +accessors( + unique int id: @accessor, + int kind: int ref, + string name: string ref, + int declaring_member_id: @member ref, + int unbound_id: @accessor ref); + +case @accessor.kind of + 1 = @getter +| 2 = @setter + ; + +init_only_accessors( + unique int id: @accessor ref); + +accessor_location( + int id: @accessor ref, + int loc: @location ref); + +events( + unique int id: @event, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @event ref); + +event_location( + int id: @event ref, + int loc: @location ref); + +event_accessors( + unique int id: @event_accessor, + int kind: int ref, + string name: string ref, + int declaring_event_id: @event ref, + int unbound_id: @event_accessor ref); + +case @event_accessor.kind of + 1 = @add_event_accessor +| 2 = @remove_event_accessor + ; + +event_accessor_location( + int id: @event_accessor ref, + int loc: @location ref); + +operators( + unique int id: @operator, + string name: string ref, + string symbol: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @operator ref); + +operator_location( + int id: @operator ref, + int loc: @location ref); + +constant_value( + int id: @variable ref, + string value: string ref); + +/** CALLABLES **/ + +@callable = @method | @constructor | @destructor | @operator | @callable_accessor | @anonymous_function_expr | @local_function; + +@callable_accessor = @accessor | @event_accessor; + +methods( + unique int id: @method, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @method ref); + +method_location( + int id: @method ref, + int loc: @location ref); + +constructors( + unique int id: @constructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @constructor ref); + +constructor_location( + int id: @constructor ref, + int loc: @location ref); + +destructors( + unique int id: @destructor, + string name: string ref, + int declaring_type_id: @type ref, + int unbound_id: @destructor ref); + +destructor_location( + int id: @destructor ref, + int loc: @location ref); + +overrides( + int id: @callable ref, + int base_id: @callable ref); + +explicitly_implements( + int id: @member ref, + int interface_id: @interface_or_ref ref); + +local_functions( + unique int id: @local_function, + string name: string ref, + int return_type: @type ref, + int unbound_id: @local_function ref); + +local_function_stmts( + unique int fn: @local_function_stmt ref, + int stmt: @local_function ref); + +/** VARIABLES **/ + +@variable = @local_scope_variable | @field; + +@local_scope_variable = @local_variable | @parameter; + +fields( + unique int id: @field, + int kind: int ref, + string name: string ref, + int declaring_type_id: @type ref, + int type_id: @type_or_ref ref, + int unbound_id: @field ref); + +case @field.kind of + 1 = @addressable_field +| 2 = @constant + ; + +field_location( + int id: @field ref, + int loc: @location ref); + +localvars( + unique int id: @local_variable, + int kind: int ref, + string name: string ref, + int implicitly_typed: int ref /* 0 = no, 1 = yes */, + int type_id: @type_or_ref ref, + int parent_id: @local_var_decl_expr ref); + +case @local_variable.kind of + 1 = @addressable_local_variable +| 2 = @local_constant +| 3 = @local_variable_ref + ; + +localvar_location( + unique int id: @local_variable ref, + int loc: @location ref); + +@parameterizable = @callable | @delegate_type | @indexer | @function_pointer_type; + +#keyset[name, parent_id] +#keyset[index, parent_id] +params( + unique int id: @parameter, + string name: string ref, + int type_id: @type_or_ref ref, + int index: int ref, + int mode: int ref, /* value = 0, ref = 1, out = 2, array = 3, this = 4 */ + int parent_id: @parameterizable ref, + int unbound_id: @parameter ref); + +param_location( + int id: @parameter ref, + int loc: @location ref); + +/** STATEMENTS **/ + +@exprorstmt_parent = @control_flow_element | @top_level_exprorstmt_parent; + +statements( + unique int id: @stmt, + int kind: int ref); + +#keyset[index, parent] +stmt_parent( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_stmt_parent = @callable; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +stmt_parent_top_level( + unique int stmt: @stmt ref, + int index: int ref, + int parent: @top_level_stmt_parent ref); + +case @stmt.kind of + 1 = @block_stmt +| 2 = @expr_stmt +| 3 = @if_stmt +| 4 = @switch_stmt +| 5 = @while_stmt +| 6 = @do_stmt +| 7 = @for_stmt +| 8 = @foreach_stmt +| 9 = @break_stmt +| 10 = @continue_stmt +| 11 = @goto_stmt +| 12 = @goto_case_stmt +| 13 = @goto_default_stmt +| 14 = @throw_stmt +| 15 = @return_stmt +| 16 = @yield_stmt +| 17 = @try_stmt +| 18 = @checked_stmt +| 19 = @unchecked_stmt +| 20 = @lock_stmt +| 21 = @using_block_stmt +| 22 = @var_decl_stmt +| 23 = @const_decl_stmt +| 24 = @empty_stmt +| 25 = @unsafe_stmt +| 26 = @fixed_stmt +| 27 = @label_stmt +| 28 = @catch +| 29 = @case_stmt +| 30 = @local_function_stmt +| 31 = @using_decl_stmt + ; + +@using_stmt = @using_block_stmt | @using_decl_stmt; + +@labeled_stmt = @label_stmt | @case; + +@decl_stmt = @var_decl_stmt | @const_decl_stmt | @using_decl_stmt; + +@cond_stmt = @if_stmt | @switch_stmt; + +@loop_stmt = @while_stmt | @do_stmt | @for_stmt | @foreach_stmt; + +@jump_stmt = @break_stmt | @goto_any_stmt | @continue_stmt | @throw_stmt | @return_stmt + | @yield_stmt; + +@goto_any_stmt = @goto_default_stmt | @goto_case_stmt | @goto_stmt; + + +stmt_location( + unique int id: @stmt ref, + int loc: @location ref); + +catch_type( + unique int catch_id: @catch ref, + int type_id: @type_or_ref ref, + int kind: int ref /* explicit = 1, implicit = 2 */); + +foreach_stmt_info( + unique int id: @foreach_stmt ref, + int kind: int ref /* non-async = 1, async = 2 */); + +@foreach_symbol = @method | @property | @type_or_ref; + +#keyset[id, kind] +foreach_stmt_desugar( + int id: @foreach_stmt ref, + int symbol: @foreach_symbol ref, + int kind: int ref /* GetEnumeratorMethod = 1, CurrentProperty = 2, MoveNextMethod = 3, DisposeMethod = 4, ElementType = 5 */); + +/** EXPRESSIONS **/ + +expressions( + unique int id: @expr, + int kind: int ref, + int type_id: @type_or_ref ref); + +#keyset[index, parent] +expr_parent( + unique int expr: @expr ref, + int index: int ref, + int parent: @control_flow_element ref); + +@top_level_expr_parent = @attribute | @field | @property | @indexer | @parameter | @directive_if | @directive_elif; + +@top_level_exprorstmt_parent = @top_level_expr_parent | @top_level_stmt_parent; + +// [index, parent] is not a keyset because the same parent may be compiled multiple times +expr_parent_top_level( + unique int expr: @expr ref, + int index: int ref, + int parent: @top_level_exprorstmt_parent ref); + +case @expr.kind of +/* literal */ + 1 = @bool_literal_expr +| 2 = @char_literal_expr +| 3 = @decimal_literal_expr +| 4 = @int_literal_expr +| 5 = @long_literal_expr +| 6 = @uint_literal_expr +| 7 = @ulong_literal_expr +| 8 = @float_literal_expr +| 9 = @double_literal_expr +| 10 = @string_literal_expr +| 11 = @null_literal_expr +/* primary & unary */ +| 12 = @this_access_expr +| 13 = @base_access_expr +| 14 = @local_variable_access_expr +| 15 = @parameter_access_expr +| 16 = @field_access_expr +| 17 = @property_access_expr +| 18 = @method_access_expr +| 19 = @event_access_expr +| 20 = @indexer_access_expr +| 21 = @array_access_expr +| 22 = @type_access_expr +| 23 = @typeof_expr +| 24 = @method_invocation_expr +| 25 = @delegate_invocation_expr +| 26 = @operator_invocation_expr +| 27 = @cast_expr +| 28 = @object_creation_expr +| 29 = @explicit_delegate_creation_expr +| 30 = @implicit_delegate_creation_expr +| 31 = @array_creation_expr +| 32 = @default_expr +| 33 = @plus_expr +| 34 = @minus_expr +| 35 = @bit_not_expr +| 36 = @log_not_expr +| 37 = @post_incr_expr +| 38 = @post_decr_expr +| 39 = @pre_incr_expr +| 40 = @pre_decr_expr +/* multiplicative */ +| 41 = @mul_expr +| 42 = @div_expr +| 43 = @rem_expr +/* additive */ +| 44 = @add_expr +| 45 = @sub_expr +/* shift */ +| 46 = @lshift_expr +| 47 = @rshift_expr +/* relational */ +| 48 = @lt_expr +| 49 = @gt_expr +| 50 = @le_expr +| 51 = @ge_expr +/* equality */ +| 52 = @eq_expr +| 53 = @ne_expr +/* logical */ +| 54 = @bit_and_expr +| 55 = @bit_xor_expr +| 56 = @bit_or_expr +| 57 = @log_and_expr +| 58 = @log_or_expr +/* type testing */ +| 59 = @is_expr +| 60 = @as_expr +/* null coalescing */ +| 61 = @null_coalescing_expr +/* conditional */ +| 62 = @conditional_expr +/* assignment */ +| 63 = @simple_assign_expr +| 64 = @assign_add_expr +| 65 = @assign_sub_expr +| 66 = @assign_mul_expr +| 67 = @assign_div_expr +| 68 = @assign_rem_expr +| 69 = @assign_and_expr +| 70 = @assign_xor_expr +| 71 = @assign_or_expr +| 72 = @assign_lshift_expr +| 73 = @assign_rshift_expr +/* more */ +| 74 = @object_init_expr +| 75 = @collection_init_expr +| 76 = @array_init_expr +| 77 = @checked_expr +| 78 = @unchecked_expr +| 79 = @constructor_init_expr +| 80 = @add_event_expr +| 81 = @remove_event_expr +| 82 = @par_expr +| 83 = @local_var_decl_expr +| 84 = @lambda_expr +| 85 = @anonymous_method_expr +| 86 = @namespace_expr +/* dynamic */ +| 92 = @dynamic_element_access_expr +| 93 = @dynamic_member_access_expr +/* unsafe */ +| 100 = @pointer_indirection_expr +| 101 = @address_of_expr +| 102 = @sizeof_expr +/* async */ +| 103 = @await_expr +/* C# 6.0 */ +| 104 = @nameof_expr +| 105 = @interpolated_string_expr +| 106 = @unknown_expr +/* C# 7.0 */ +| 107 = @throw_expr +| 108 = @tuple_expr +| 109 = @local_function_invocation_expr +| 110 = @ref_expr +| 111 = @discard_expr +/* C# 8.0 */ +| 112 = @range_expr +| 113 = @index_expr +| 114 = @switch_expr +| 115 = @recursive_pattern_expr +| 116 = @property_pattern_expr +| 117 = @positional_pattern_expr +| 118 = @switch_case_expr +| 119 = @assign_coalesce_expr +| 120 = @suppress_nullable_warning_expr +| 121 = @namespace_access_expr +/* C# 9.0 */ +| 122 = @lt_pattern_expr +| 123 = @gt_pattern_expr +| 124 = @le_pattern_expr +| 125 = @ge_pattern_expr +| 126 = @not_pattern_expr +| 127 = @and_pattern_expr +| 128 = @or_pattern_expr +| 129 = @function_pointer_invocation_expr +| 130 = @with_expr +/* C# 11.0 */ +| 131 = @list_pattern_expr +| 132 = @slice_pattern_expr +| 133 = @urshift_expr +| 134 = @assign_urshift_expr +/* Preprocessor */ +| 999 = @define_symbol_expr +; + +@switch = @switch_stmt | @switch_expr; +@case = @case_stmt | @switch_case_expr; +@pattern_match = @case | @is_expr; +@unary_pattern_expr = @not_pattern_expr; +@relational_pattern_expr = @gt_pattern_expr | @lt_pattern_expr | @ge_pattern_expr | @le_pattern_expr; +@binary_pattern_expr = @and_pattern_expr | @or_pattern_expr; + +@integer_literal_expr = @int_literal_expr | @long_literal_expr | @uint_literal_expr | @ulong_literal_expr; +@real_literal_expr = @float_literal_expr | @double_literal_expr | @decimal_literal_expr; +@literal_expr = @bool_literal_expr | @char_literal_expr | @integer_literal_expr | @real_literal_expr + | @string_literal_expr | @null_literal_expr; + +@assign_expr = @simple_assign_expr | @assign_op_expr | @local_var_decl_expr; +@assign_op_expr = @assign_arith_expr | @assign_bitwise_expr | @assign_event_expr | @assign_coalesce_expr; +@assign_event_expr = @add_event_expr | @remove_event_expr; + +@assign_arith_expr = @assign_add_expr | @assign_sub_expr | @assign_mul_expr | @assign_div_expr + | @assign_rem_expr +@assign_bitwise_expr = @assign_and_expr | @assign_or_expr | @assign_xor_expr + | @assign_lshift_expr | @assign_rshift_expr | @assign_urshift_expr; + +@member_access_expr = @field_access_expr | @property_access_expr | @indexer_access_expr | @event_access_expr + | @method_access_expr | @type_access_expr | @dynamic_member_access_expr; +@access_expr = @member_access_expr | @this_access_expr | @base_access_expr | @assignable_access_expr | @namespace_access_expr; +@element_access_expr = @indexer_access_expr | @array_access_expr | @dynamic_element_access_expr; + +@local_variable_access = @local_variable_access_expr | @local_var_decl_expr; +@local_scope_variable_access_expr = @parameter_access_expr | @local_variable_access; +@variable_access_expr = @local_scope_variable_access_expr | @field_access_expr; + +@assignable_access_expr = @variable_access_expr | @property_access_expr | @element_access_expr + | @event_access_expr | @dynamic_member_access_expr; + +@objectorcollection_init_expr = @object_init_expr | @collection_init_expr; + +@delegate_creation_expr = @explicit_delegate_creation_expr | @implicit_delegate_creation_expr; + +@bin_arith_op_expr = @mul_expr | @div_expr | @rem_expr | @add_expr | @sub_expr; +@incr_op_expr = @pre_incr_expr | @post_incr_expr; +@decr_op_expr = @pre_decr_expr | @post_decr_expr; +@mut_op_expr = @incr_op_expr | @decr_op_expr; +@un_arith_op_expr = @plus_expr | @minus_expr | @mut_op_expr; +@arith_op_expr = @bin_arith_op_expr | @un_arith_op_expr; + +@ternary_log_op_expr = @conditional_expr; +@bin_log_op_expr = @log_and_expr | @log_or_expr | @null_coalescing_expr; +@un_log_op_expr = @log_not_expr; +@log_expr = @un_log_op_expr | @bin_log_op_expr | @ternary_log_op_expr; + +@bin_bit_op_expr = @bit_and_expr | @bit_or_expr | @bit_xor_expr | @lshift_expr + | @rshift_expr | @urshift_expr; +@un_bit_op_expr = @bit_not_expr; +@bit_expr = @un_bit_op_expr | @bin_bit_op_expr; + +@equality_op_expr = @eq_expr | @ne_expr; +@rel_op_expr = @gt_expr | @lt_expr| @ge_expr | @le_expr; +@comp_expr = @equality_op_expr | @rel_op_expr; + +@op_expr = @assign_expr | @un_op | @bin_op | @ternary_op; + +@ternary_op = @ternary_log_op_expr; +@bin_op = @bin_arith_op_expr | @bin_log_op_expr | @bin_bit_op_expr | @comp_expr; +@un_op = @un_arith_op_expr | @un_log_op_expr | @un_bit_op_expr | @sizeof_expr + | @pointer_indirection_expr | @address_of_expr; + +@anonymous_function_expr = @lambda_expr | @anonymous_method_expr; + +@call = @method_invocation_expr | @constructor_init_expr | @operator_invocation_expr + | @delegate_invocation_expr | @object_creation_expr | @call_access_expr + | @local_function_invocation_expr | @function_pointer_invocation_expr; + +@call_access_expr = @property_access_expr | @event_access_expr | @indexer_access_expr; + +@late_bindable_expr = @dynamic_element_access_expr | @dynamic_member_access_expr + | @object_creation_expr | @method_invocation_expr | @operator_invocation_expr; + +@throw_element = @throw_expr | @throw_stmt; + +@implicitly_typeable_object_creation_expr = @object_creation_expr | @explicit_delegate_creation_expr; + +implicitly_typed_array_creation( + unique int id: @array_creation_expr ref); + +explicitly_sized_array_creation( + unique int id: @array_creation_expr ref); + +stackalloc_array_creation( + unique int id: @array_creation_expr ref); + +implicitly_typed_object_creation( + unique int id: @implicitly_typeable_object_creation_expr ref); + +mutator_invocation_mode( + unique int id: @operator_invocation_expr ref, + int mode: int ref /* prefix = 1, postfix = 2*/); + +expr_compiler_generated( + unique int id: @expr ref); + +expr_value( + unique int id: @expr ref, + string value: string ref); + +expr_call( + unique int caller_id: @expr ref, + int target_id: @callable ref); + +expr_access( + unique int accesser_id: @access_expr ref, + int target_id: @accessible ref); + +@accessible = @method | @assignable | @local_function | @namespace; + +expr_location( + unique int id: @expr ref, + int loc: @location ref); + +dynamic_member_name( + unique int id: @late_bindable_expr ref, + string name: string ref); + +@qualifiable_expr = @member_access_expr + | @method_invocation_expr + | @element_access_expr; + +conditional_access( + unique int id: @qualifiable_expr ref); + +expr_argument( + unique int id: @expr ref, + int mode: int ref); + /* mode is the same as params: value = 0, ref = 1, out = 2 */ + +expr_argument_name( + unique int id: @expr ref, + string name: string ref); + +lambda_expr_return_type( + unique int id: @lambda_expr ref, + int type_id: @type_or_ref ref); + +/** CONTROL/DATA FLOW **/ + +@control_flow_element = @stmt | @expr; + +/* XML Files */ + +xmlEncoding ( + unique int id: @file ref, + string encoding: string ref); + +xmlDTDs( + unique int id: @xmldtd, + string root: string ref, + string publicId: string ref, + string systemId: string ref, + int fileid: @file ref); + +xmlElements( + unique int id: @xmlelement, + string name: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int fileid: @file ref); + +xmlAttrs( + unique int id: @xmlattribute, + int elementid: @xmlelement ref, + string name: string ref, + string value: string ref, + int idx: int ref, + int fileid: @file ref); + +xmlNs( + int id: @xmlnamespace, + string prefixName: string ref, + string URI: string ref, + int fileid: @file ref); + +xmlHasNs( + int elementId: @xmlnamespaceable ref, + int nsId: @xmlnamespace ref, + int fileid: @file ref); + +xmlComments( + unique int id: @xmlcomment, + string text: string ref, + int parentid: @xmlparent ref, + int fileid: @file ref); + +xmlChars( + unique int id: @xmlcharacters, + string text: string ref, + int parentid: @xmlparent ref, + int idx: int ref, + int isCDATA: int ref, + int fileid: @file ref); + +@xmlparent = @file | @xmlelement; +@xmlnamespaceable = @xmlelement | @xmlattribute; + +xmllocations( + int xmlElement: @xmllocatable ref, + int location: @location_default ref); + +@xmllocatable = @xmlcharacters | @xmlelement | @xmlcomment | @xmlattribute | @xmldtd | @file | @xmlnamespace; + +/* Comments */ + +commentline( + unique int id: @commentline, + int kind: int ref, + string text: string ref, + string rawtext: string ref); + +case @commentline.kind of + 0 = @singlelinecomment +| 1 = @xmldoccomment +| 2 = @multilinecomment; + +commentline_location( + unique int id: @commentline ref, + int loc: @location ref); + +commentblock( + unique int id : @commentblock); + +commentblock_location( + unique int id: @commentblock ref, + int loc: @location ref); + +commentblock_binding( + int id: @commentblock ref, + int entity: @element ref, + int bindtype: int ref); /* 0: Parent, 1: Best, 2: Before, 3: After */ + +commentblock_child( + int id: @commentblock ref, + int commentline: @commentline ref, + int index: int ref); + +/* ASP.NET */ + +case @asp_element.kind of + 0=@asp_close_tag +| 1=@asp_code +| 2=@asp_comment +| 3=@asp_data_binding +| 4=@asp_directive +| 5=@asp_open_tag +| 6=@asp_quoted_string +| 7=@asp_text +| 8=@asp_xml_directive; + +@asp_attribute = @asp_code | @asp_data_binding | @asp_quoted_string; + +asp_elements( + unique int id: @asp_element, + int kind: int ref, + int loc: @location ref); + +asp_comment_server(unique int comment: @asp_comment ref); +asp_code_inline(unique int code: @asp_code ref); +asp_directive_attribute( + int directive: @asp_directive ref, + int index: int ref, + string name: string ref, + int value: @asp_quoted_string ref); +asp_directive_name( + unique int directive: @asp_directive ref, + string name: string ref); +asp_element_body( + unique int element: @asp_element ref, + string body: string ref); +asp_tag_attribute( + int tag: @asp_open_tag ref, + int index: int ref, + string name: string ref, + int attribute: @asp_attribute ref); +asp_tag_name( + unique int tag: @asp_open_tag ref, + string name: string ref); +asp_tag_isempty(int tag: @asp_open_tag ref); + +/* Common Intermediate Language - CIL */ + +case @cil_instruction.opcode of + 0 = @cil_nop +| 1 = @cil_break +| 2 = @cil_ldarg_0 +| 3 = @cil_ldarg_1 +| 4 = @cil_ldarg_2 +| 5 = @cil_ldarg_3 +| 6 = @cil_ldloc_0 +| 7 = @cil_ldloc_1 +| 8 = @cil_ldloc_2 +| 9 = @cil_ldloc_3 +| 10 = @cil_stloc_0 +| 11 = @cil_stloc_1 +| 12 = @cil_stloc_2 +| 13 = @cil_stloc_3 +| 14 = @cil_ldarg_s +| 15 = @cil_ldarga_s +| 16 = @cil_starg_s +| 17 = @cil_ldloc_s +| 18 = @cil_ldloca_s +| 19 = @cil_stloc_s +| 20 = @cil_ldnull +| 21 = @cil_ldc_i4_m1 +| 22 = @cil_ldc_i4_0 +| 23 = @cil_ldc_i4_1 +| 24 = @cil_ldc_i4_2 +| 25 = @cil_ldc_i4_3 +| 26 = @cil_ldc_i4_4 +| 27 = @cil_ldc_i4_5 +| 28 = @cil_ldc_i4_6 +| 29 = @cil_ldc_i4_7 +| 30 = @cil_ldc_i4_8 +| 31 = @cil_ldc_i4_s +| 32 = @cil_ldc_i4 +| 33 = @cil_ldc_i8 +| 34 = @cil_ldc_r4 +| 35 = @cil_ldc_r8 +| 37 = @cil_dup +| 38 = @cil_pop +| 39 = @cil_jmp +| 40 = @cil_call +| 41 = @cil_calli +| 42 = @cil_ret +| 43 = @cil_br_s +| 44 = @cil_brfalse_s +| 45 = @cil_brtrue_s +| 46 = @cil_beq_s +| 47 = @cil_bge_s +| 48 = @cil_bgt_s +| 49 = @cil_ble_s +| 50 = @cil_blt_s +| 51 = @cil_bne_un_s +| 52 = @cil_bge_un_s +| 53 = @cil_bgt_un_s +| 54 = @cil_ble_un_s +| 55 = @cil_blt_un_s +| 56 = @cil_br +| 57 = @cil_brfalse +| 58 = @cil_brtrue +| 59 = @cil_beq +| 60 = @cil_bge +| 61 = @cil_bgt +| 62 = @cil_ble +| 63 = @cil_blt +| 64 = @cil_bne_un +| 65 = @cil_bge_un +| 66 = @cil_bgt_un +| 67 = @cil_ble_un +| 68 = @cil_blt_un +| 69 = @cil_switch +| 70 = @cil_ldind_i1 +| 71 = @cil_ldind_u1 +| 72 = @cil_ldind_i2 +| 73 = @cil_ldind_u2 +| 74 = @cil_ldind_i4 +| 75 = @cil_ldind_u4 +| 76 = @cil_ldind_i8 +| 77 = @cil_ldind_i +| 78 = @cil_ldind_r4 +| 79 = @cil_ldind_r8 +| 80 = @cil_ldind_ref +| 81 = @cil_stind_ref +| 82 = @cil_stind_i1 +| 83 = @cil_stind_i2 +| 84 = @cil_stind_i4 +| 85 = @cil_stind_i8 +| 86 = @cil_stind_r4 +| 87 = @cil_stind_r8 +| 88 = @cil_add +| 89 = @cil_sub +| 90 = @cil_mul +| 91 = @cil_div +| 92 = @cil_div_un +| 93 = @cil_rem +| 94 = @cil_rem_un +| 95 = @cil_and +| 96 = @cil_or +| 97 = @cil_xor +| 98 = @cil_shl +| 99 = @cil_shr +| 100 = @cil_shr_un +| 101 = @cil_neg +| 102 = @cil_not +| 103 = @cil_conv_i1 +| 104 = @cil_conv_i2 +| 105 = @cil_conv_i4 +| 106 = @cil_conv_i8 +| 107 = @cil_conv_r4 +| 108 = @cil_conv_r8 +| 109 = @cil_conv_u4 +| 110 = @cil_conv_u8 +| 111 = @cil_callvirt +| 112 = @cil_cpobj +| 113 = @cil_ldobj +| 114 = @cil_ldstr +| 115 = @cil_newobj +| 116 = @cil_castclass +| 117 = @cil_isinst +| 118 = @cil_conv_r_un +| 121 = @cil_unbox +| 122 = @cil_throw +| 123 = @cil_ldfld +| 124 = @cil_ldflda +| 125 = @cil_stfld +| 126 = @cil_ldsfld +| 127 = @cil_ldsflda +| 128 = @cil_stsfld +| 129 = @cil_stobj +| 130 = @cil_conv_ovf_i1_un +| 131 = @cil_conv_ovf_i2_un +| 132 = @cil_conv_ovf_i4_un +| 133 = @cil_conv_ovf_i8_un +| 134 = @cil_conv_ovf_u1_un +| 135 = @cil_conv_ovf_u2_un +| 136 = @cil_conv_ovf_u4_un +| 137 = @cil_conv_ovf_u8_un +| 138 = @cil_conv_ovf_i_un +| 139 = @cil_conv_ovf_u_un +| 140 = @cil_box +| 141 = @cil_newarr +| 142 = @cil_ldlen +| 143 = @cil_ldelema +| 144 = @cil_ldelem_i1 +| 145 = @cil_ldelem_u1 +| 146 = @cil_ldelem_i2 +| 147 = @cil_ldelem_u2 +| 148 = @cil_ldelem_i4 +| 149 = @cil_ldelem_u4 +| 150 = @cil_ldelem_i8 +| 151 = @cil_ldelem_i +| 152 = @cil_ldelem_r4 +| 153 = @cil_ldelem_r8 +| 154 = @cil_ldelem_ref +| 155 = @cil_stelem_i +| 156 = @cil_stelem_i1 +| 157 = @cil_stelem_i2 +| 158 = @cil_stelem_i4 +| 159 = @cil_stelem_i8 +| 160 = @cil_stelem_r4 +| 161 = @cil_stelem_r8 +| 162 = @cil_stelem_ref +| 163 = @cil_ldelem +| 164 = @cil_stelem +| 165 = @cil_unbox_any +| 179 = @cil_conv_ovf_i1 +| 180 = @cil_conv_ovf_u1 +| 181 = @cil_conv_ovf_i2 +| 182 = @cil_conv_ovf_u2 +| 183 = @cil_conv_ovf_i4 +| 184 = @cil_conv_ovf_u4 +| 185 = @cil_conv_ovf_i8 +| 186 = @cil_conv_ovf_u8 +| 194 = @cil_refanyval +| 195 = @cil_ckinfinite +| 198 = @cil_mkrefany +| 208 = @cil_ldtoken +| 209 = @cil_conv_u2 +| 210 = @cil_conv_u1 +| 211 = @cil_conv_i +| 212 = @cil_conv_ovf_i +| 213 = @cil_conv_ovf_u +| 214 = @cil_add_ovf +| 215 = @cil_add_ovf_un +| 216 = @cil_mul_ovf +| 217 = @cil_mul_ovf_un +| 218 = @cil_sub_ovf +| 219 = @cil_sub_ovf_un +| 220 = @cil_endfinally +| 221 = @cil_leave +| 222 = @cil_leave_s +| 223 = @cil_stind_i +| 224 = @cil_conv_u +| 65024 = @cil_arglist +| 65025 = @cil_ceq +| 65026 = @cil_cgt +| 65027 = @cil_cgt_un +| 65028 = @cil_clt +| 65029 = @cil_clt_un +| 65030 = @cil_ldftn +| 65031 = @cil_ldvirtftn +| 65033 = @cil_ldarg +| 65034 = @cil_ldarga +| 65035 = @cil_starg +| 65036 = @cil_ldloc +| 65037 = @cil_ldloca +| 65038 = @cil_stloc +| 65039 = @cil_localloc +| 65041 = @cil_endfilter +| 65042 = @cil_unaligned +| 65043 = @cil_volatile +| 65044 = @cil_tail +| 65045 = @cil_initobj +| 65046 = @cil_constrained +| 65047 = @cil_cpblk +| 65048 = @cil_initblk +| 65050 = @cil_rethrow +| 65052 = @cil_sizeof +| 65053 = @cil_refanytype +| 65054 = @cil_readonly +; + +// CIL ignored instructions + +@cil_ignore = @cil_nop | @cil_break | @cil_volatile | @cil_unaligned; + +// CIL local/parameter/field access + +@cil_ldarg_any = @cil_ldarg_0 | @cil_ldarg_1 | @cil_ldarg_2 | @cil_ldarg_3 | @cil_ldarg_s | @cil_ldarga_s | @cil_ldarg | @cil_ldarga; +@cil_starg_any = @cil_starg | @cil_starg_s; + +@cil_ldloc_any = @cil_ldloc_0 | @cil_ldloc_1 | @cil_ldloc_2 | @cil_ldloc_3 | @cil_ldloc_s | @cil_ldloca_s | @cil_ldloc | @cil_ldloca; +@cil_stloc_any = @cil_stloc_0 | @cil_stloc_1 | @cil_stloc_2 | @cil_stloc_3 | @cil_stloc_s | @cil_stloc; + +@cil_ldfld_any = @cil_ldfld | @cil_ldsfld | @cil_ldsflda | @cil_ldflda; +@cil_stfld_any = @cil_stfld | @cil_stsfld; + +@cil_local_access = @cil_stloc_any | @cil_ldloc_any; +@cil_arg_access = @cil_starg_any | @cil_ldarg_any; +@cil_read_access = @cil_ldloc_any | @cil_ldarg_any | @cil_ldfld_any; +@cil_write_access = @cil_stloc_any | @cil_starg_any | @cil_stfld_any; + +@cil_stack_access = @cil_local_access | @cil_arg_access; +@cil_field_access = @cil_ldfld_any | @cil_stfld_any; + +@cil_access = @cil_read_access | @cil_write_access; + +// CIL constant/literal instructions + +@cil_ldc_i = @cil_ldc_i4_any | @cil_ldc_i8; + +@cil_ldc_i4_any = @cil_ldc_i4_m1 | @cil_ldc_i4_0 | @cil_ldc_i4_1 | @cil_ldc_i4_2 | @cil_ldc_i4_3 | + @cil_ldc_i4_4 | @cil_ldc_i4_5 | @cil_ldc_i4_6 | @cil_ldc_i4_7 | @cil_ldc_i4_8 | @cil_ldc_i4_s | @cil_ldc_i4; + +@cil_ldc_r = @cil_ldc_r4 | @cil_ldc_r8; + +@cil_literal = @cil_ldnull | @cil_ldc_i | @cil_ldc_r | @cil_ldstr; + +// Control flow + +@cil_conditional_jump = @cil_binary_jump | @cil_unary_jump; +@cil_binary_jump = @cil_beq_s | @cil_bge_s | @cil_bgt_s | @cil_ble_s | @cil_blt_s | + @cil_bne_un_s | @cil_bge_un_s | @cil_bgt_un_s | @cil_ble_un_s | @cil_blt_un_s | + @cil_beq | @cil_bge | @cil_bgt | @cil_ble | @cil_blt | + @cil_bne_un | @cil_bge_un | @cil_bgt_un | @cil_ble_un | @cil_blt_un; +@cil_unary_jump = @cil_brfalse_s | @cil_brtrue_s | @cil_brfalse | @cil_brtrue | @cil_switch; +@cil_unconditional_jump = @cil_br | @cil_br_s | @cil_leave_any; +@cil_leave_any = @cil_leave | @cil_leave_s; +@cil_jump = @cil_unconditional_jump | @cil_conditional_jump; + +// CIL call instructions + +@cil_call_any = @cil_jmp | @cil_call | @cil_calli | @cil_tail | @cil_callvirt | @cil_newobj; + +// CIL expression instructions + +@cil_expr = @cil_literal | @cil_binary_expr | @cil_unary_expr | @cil_call_any | @cil_read_access | + @cil_newarr | @cil_ldtoken | @cil_sizeof | + @cil_ldftn | @cil_ldvirtftn | @cil_localloc | @cil_mkrefany | @cil_refanytype | @cil_arglist | @cil_dup; + +@cil_unary_expr = + @cil_conversion_operation | @cil_unary_arithmetic_operation | @cil_unary_bitwise_operation| + @cil_ldlen | @cil_isinst | @cil_box | @cil_ldobj | @cil_castclass | @cil_unbox_any | + @cil_ldind | @cil_unbox; + +@cil_conversion_operation = + @cil_conv_i1 | @cil_conv_i2 | @cil_conv_i4 | @cil_conv_i8 | + @cil_conv_u1 | @cil_conv_u2 | @cil_conv_u4 | @cil_conv_u8 | + @cil_conv_ovf_i | @cil_conv_ovf_i_un | @cil_conv_ovf_i1 | @cil_conv_ovf_i1_un | + @cil_conv_ovf_i2 | @cil_conv_ovf_i2_un | @cil_conv_ovf_i4 | @cil_conv_ovf_i4_un | + @cil_conv_ovf_i8 | @cil_conv_ovf_i8_un | @cil_conv_ovf_u | @cil_conv_ovf_u_un | + @cil_conv_ovf_u1 | @cil_conv_ovf_u1_un | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_ovf_u4 | @cil_conv_ovf_u4_un | @cil_conv_ovf_u8 | @cil_conv_ovf_u8_un | + @cil_conv_r4 | @cil_conv_r8 | @cil_conv_ovf_u2 | @cil_conv_ovf_u2_un | + @cil_conv_i | @cil_conv_u | @cil_conv_r_un; + +@cil_ldind = @cil_ldind_i | @cil_ldind_i1 | @cil_ldind_i2 | @cil_ldind_i4 | @cil_ldind_i8 | + @cil_ldind_r4 | @cil_ldind_r8 | @cil_ldind_ref | @cil_ldind_u1 | @cil_ldind_u2 | @cil_ldind_u4; + +@cil_stind = @cil_stind_i | @cil_stind_i1 | @cil_stind_i2 | @cil_stind_i4 | @cil_stind_i8 | + @cil_stind_r4 | @cil_stind_r8 | @cil_stind_ref; + +@cil_bitwise_operation = @cil_binary_bitwise_operation | @cil_unary_bitwise_operation; + +@cil_binary_bitwise_operation = @cil_and | @cil_or | @cil_xor | @cil_shr | @cil_shr | @cil_shr_un | @cil_shl; + +@cil_binary_arithmetic_operation = @cil_add | @cil_sub | @cil_mul | @cil_div | @cil_div_un | + @cil_rem | @cil_rem_un | @cil_add_ovf | @cil_add_ovf_un | @cil_mul_ovf | @cil_mul_ovf_un | + @cil_sub_ovf | @cil_sub_ovf_un; + +@cil_unary_bitwise_operation = @cil_not; + +@cil_binary_expr = @cil_binary_arithmetic_operation | @cil_binary_bitwise_operation | @cil_read_array | @cil_comparison_operation; + +@cil_unary_arithmetic_operation = @cil_neg; + +@cil_comparison_operation = @cil_cgt_un | @cil_ceq | @cil_cgt | @cil_clt | @cil_clt_un; + +// Elements that retrieve an address of something +@cil_read_ref = @cil_ldloca_s | @cil_ldarga_s | @cil_ldflda | @cil_ldsflda | @cil_ldelema; + +// CIL array instructions + +@cil_read_array = + @cil_ldelem | @cil_ldelema | @cil_ldelem_i1 | @cil_ldelem_ref | @cil_ldelem_i | + @cil_ldelem_i1 | @cil_ldelem_i2 | @cil_ldelem_i4 | @cil_ldelem_i8 | @cil_ldelem_r4 | + @cil_ldelem_r8 | @cil_ldelem_u1 | @cil_ldelem_u2 | @cil_ldelem_u4; + +@cil_write_array = @cil_stelem | @cil_stelem_ref | + @cil_stelem_i | @cil_stelem_i1 | @cil_stelem_i2 | @cil_stelem_i4 | @cil_stelem_i8 | + @cil_stelem_r4 | @cil_stelem_r8; + +@cil_throw_any = @cil_throw | @cil_rethrow; + +#keyset[impl, index] +cil_instruction( + unique int id: @cil_instruction, + int opcode: int ref, + int index: int ref, + int impl: @cil_method_implementation ref); + +cil_jump( + unique int instruction: @cil_jump ref, + int target: @cil_instruction ref); + +cil_access( + unique int instruction: @cil_instruction ref, + int target: @cil_accessible ref); + +cil_value( + unique int instruction: @cil_literal ref, + string value: string ref); + +#keyset[instruction, index] +cil_switch( + int instruction: @cil_switch ref, + int index: int ref, + int target: @cil_instruction ref); + +cil_instruction_location( + unique int id: @cil_instruction ref, + int loc: @location ref); + +cil_type_location( + int id: @cil_type ref, + int loc: @location ref); + +cil_method_location( + int id: @cil_method ref, + int loc: @location ref); + +@cil_namespace = @namespace; + +@cil_type_container = @cil_type | @cil_namespace | @cil_method; + +case @cil_type.kind of + 0 = @cil_valueorreftype +| 1 = @cil_typeparameter +| 2 = @cil_array_type +| 3 = @cil_pointer_type +| 4 = @cil_function_pointer_type +; + +cil_type( + unique int id: @cil_type, + string name: string ref, + int kind: int ref, + int parent: @cil_type_container ref, + int sourceDecl: @cil_type ref); + +cil_pointer_type( + unique int id: @cil_pointer_type ref, + int pointee: @cil_type ref); + +cil_array_type( + unique int id: @cil_array_type ref, + int element_type: @cil_type ref, + int rank: int ref); + +cil_function_pointer_return_type( + unique int id: @cil_function_pointer_type ref, + int return_type: @cil_type ref); + +cil_method( + unique int id: @cil_method, + string name: string ref, + int parent: @cil_type ref, + int return_type: @cil_type ref); + +cil_method_source_declaration( + unique int method: @cil_method ref, + int source: @cil_method ref); + +cil_method_implementation( + unique int id: @cil_method_implementation, + int method: @cil_method ref, + int location: @assembly ref); + +cil_implements( + int id: @cil_method ref, + int decl: @cil_method ref); + +#keyset[parent, name] +cil_field( + unique int id: @cil_field, + int parent: @cil_type ref, + string name: string ref, + int field_type: @cil_type ref); + +@cil_element = @cil_instruction | @cil_declaration | @cil_handler | @cil_attribute | @cil_namespace; +@cil_named_element = @cil_declaration | @cil_namespace; +@cil_declaration = @cil_variable | @cil_method | @cil_type | @cil_member; +@cil_accessible = @cil_declaration; +@cil_variable = @cil_field | @cil_stack_variable; +@cil_stack_variable = @cil_local_variable | @cil_parameter; +@cil_member = @cil_method | @cil_type | @cil_field | @cil_property | @cil_event; +@cil_custom_modifier_receiver = @cil_method | @cil_property | @cil_parameter | @cil_field | @cil_function_pointer_type; +@cil_parameterizable = @cil_method | @cil_function_pointer_type; +@cil_has_type_annotation = @cil_stack_variable | @cil_property | @cil_method | @cil_function_pointer_type; + +#keyset[parameterizable, index] +cil_parameter( + unique int id: @cil_parameter, + int parameterizable: @cil_parameterizable ref, + int index: int ref, + int param_type: @cil_type ref); + +cil_parameter_in(unique int id: @cil_parameter ref); +cil_parameter_out(unique int id: @cil_parameter ref); + +cil_setter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +#keyset[id, modifier] +cil_custom_modifiers( + int id: @cil_custom_modifier_receiver ref, + int modifier: @cil_type ref, + int kind: int ref); // modreq: 1, modopt: 0 + +cil_type_annotation( + int id: @cil_has_type_annotation ref, + int annotation: int ref); + +cil_getter(unique int prop: @cil_property ref, + int method: @cil_method ref); + +cil_adder(unique int event: @cil_event ref, + int method: @cil_method ref); + +cil_remover(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_raiser(unique int event: @cil_event ref, int method: @cil_method ref); + +cil_property( + unique int id: @cil_property, + int parent: @cil_type ref, + string name: string ref, + int property_type: @cil_type ref); + +#keyset[parent, name] +cil_event(unique int id: @cil_event, + int parent: @cil_type ref, + string name: string ref, + int event_type: @cil_type ref); + +#keyset[impl, index] +cil_local_variable( + unique int id: @cil_local_variable, + int impl: @cil_method_implementation ref, + int index: int ref, + int var_type: @cil_type ref); + +cil_function_pointer_calling_conventions( + int id: @cil_function_pointer_type ref, + int kind: int ref); + +// CIL handlers (exception handlers etc). + +case @cil_handler.kind of + 0 = @cil_catch_handler +| 1 = @cil_filter_handler +| 2 = @cil_finally_handler +| 4 = @cil_fault_handler +; + +#keyset[impl, index] +cil_handler( + unique int id: @cil_handler, + int impl: @cil_method_implementation ref, + int index: int ref, + int kind: int ref, + int try_start: @cil_instruction ref, + int try_end: @cil_instruction ref, + int handler_start: @cil_instruction ref); + +cil_handler_filter( + unique int id: @cil_handler ref, + int filter_start: @cil_instruction ref); + +cil_handler_type( + unique int id: @cil_handler ref, + int catch_type: @cil_type ref); + +@cil_controlflow_node = @cil_entry_point | @cil_instruction; + +@cil_entry_point = @cil_method_implementation | @cil_handler; + +@cil_dataflow_node = @cil_instruction | @cil_variable | @cil_method; + +cil_method_stack_size( + unique int method: @cil_method_implementation ref, + int size: int ref); + +// CIL modifiers + +cil_public(int id: @cil_member ref); +cil_private(int id: @cil_member ref); +cil_protected(int id: @cil_member ref); +cil_internal(int id: @cil_member ref); +cil_static(int id: @cil_member ref); +cil_sealed(int id: @cil_member ref); +cil_virtual(int id: @cil_method ref); +cil_abstract(int id: @cil_member ref); +cil_class(int id: @cil_type ref); +cil_interface(int id: @cil_type ref); +cil_security(int id: @cil_member ref); +cil_requiresecobject(int id: @cil_method ref); +cil_specialname(int id: @cil_method ref); +cil_newslot(int id: @cil_method ref); + +cil_base_class(unique int id: @cil_type ref, int base: @cil_type ref); +cil_base_interface(int id: @cil_type ref, int base: @cil_type ref); +cil_enum_underlying_type(unique int id: @cil_type ref, int underlying: @cil_type ref); + +#keyset[unbound, index] +cil_type_parameter( + int unbound: @cil_member ref, + int index: int ref, + int param: @cil_typeparameter ref); + +#keyset[bound, index] +cil_type_argument( + int bound: @cil_member ref, + int index: int ref, + int t: @cil_type ref); + +// CIL type parameter constraints + +cil_typeparam_covariant(int tp: @cil_typeparameter ref); +cil_typeparam_contravariant(int tp: @cil_typeparameter ref); +cil_typeparam_class(int tp: @cil_typeparameter ref); +cil_typeparam_struct(int tp: @cil_typeparameter ref); +cil_typeparam_new(int tp: @cil_typeparameter ref); +cil_typeparam_constraint(int tp: @cil_typeparameter ref, int supertype: @cil_type ref); + +// CIL attributes + +cil_attribute( + unique int attributeid: @cil_attribute, + int element: @cil_declaration ref, + int constructor: @cil_method ref); + +#keyset[attribute_id, param] +cil_attribute_named_argument( + int attribute_id: @cil_attribute ref, + string param: string ref, + string value: string ref); + +#keyset[attribute_id, index] +cil_attribute_positional_argument( + int attribute_id: @cil_attribute ref, + int index: int ref, + string value: string ref); + + +// Common .Net data model covering both C# and CIL + +// Common elements +@dotnet_element = @element | @cil_element; +@dotnet_named_element = @named_element | @cil_named_element; +@dotnet_callable = @callable | @cil_method; +@dotnet_variable = @variable | @cil_variable; +@dotnet_field = @field | @cil_field; +@dotnet_parameter = @parameter | @cil_parameter; +@dotnet_declaration = @declaration | @cil_declaration; +@dotnet_member = @member | @cil_member; +@dotnet_event = @event | @cil_event; +@dotnet_property = @property | @cil_property | @indexer; +@dotnet_parameterizable = @parameterizable | @cil_parameterizable; + +// Common types +@dotnet_type = @type | @cil_type; +@dotnet_call = @call | @cil_call_any; +@dotnet_throw = @throw_element | @cil_throw_any; +@dotnet_valueorreftype = @cil_valueorreftype | @value_or_ref_type | @cil_array_type | @void_type; +@dotnet_typeparameter = @type_parameter | @cil_typeparameter; +@dotnet_array_type = @array_type | @cil_array_type; +@dotnet_pointer_type = @pointer_type | @cil_pointer_type; +@dotnet_type_parameter = @type_parameter | @cil_typeparameter; +@dotnet_generic = @dotnet_valueorreftype | @dotnet_callable; + +// Attributes +@dotnet_attribute = @attribute | @cil_attribute; + +// Expressions +@dotnet_expr = @expr | @cil_expr; + +// Literals +@dotnet_literal = @literal_expr | @cil_literal; +@dotnet_string_literal = @string_literal_expr | @cil_ldstr; +@dotnet_int_literal = @integer_literal_expr | @cil_ldc_i; +@dotnet_float_literal = @float_literal_expr | @cil_ldc_r; +@dotnet_null_literal = @null_literal_expr | @cil_ldnull; + +@metadata_entity = @cil_method | @cil_type | @cil_field | @cil_property | @field | @property | + @callable | @value_or_ref_type | @void_type; + +#keyset[entity, location] +metadata_handle(int entity : @metadata_entity ref, int location: @assembly ref, int handle: int ref) diff --git a/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/upgrade.properties b/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/upgrade.properties new file mode 100644 index 00000000000..5c0903d7ead --- /dev/null +++ b/csharp/ql/lib/upgrades/d0fba103f7dee477dd7d9f6c038518b3f683b2c7/upgrade.properties @@ -0,0 +1,2 @@ +description: Add operators to the virtualizable type. +compatibility: full \ No newline at end of file diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index b58edb4a4c8..ccadde93480 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.5.1 + +No user-facing changes. + ## 0.5.0 ### New Queries diff --git a/csharp/ql/src/change-notes/released/0.5.1.md b/csharp/ql/src/change-notes/released/0.5.1.md new file mode 100644 index 00000000000..0275d38f63c --- /dev/null +++ b/csharp/ql/src/change-notes/released/0.5.1.md @@ -0,0 +1,3 @@ +## 0.5.1 + +No user-facing changes. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 30e271c5361..0bf7024c337 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.5.1 diff --git a/csharp/ql/src/codeql-suites/csharp-security-experimental.qls b/csharp/ql/src/codeql-suites/csharp-security-experimental.qls new file mode 100644 index 00000000000..b47176b0e87 --- /dev/null +++ b/csharp/ql/src/codeql-suites/csharp-security-experimental.qls @@ -0,0 +1,4 @@ +- description: Extended and experimental security queries for C# +- queries: . +- apply: security-experimental-selectors.yml + from: codeql/suite-helpers \ No newline at end of file diff --git a/csharp/ql/src/experimental/CWE-099/TaintedWebClient.ql b/csharp/ql/src/experimental/CWE-099/TaintedWebClient.ql index 8cee95a3d54..e4d2cbd0d4e 100644 --- a/csharp/ql/src/experimental/CWE-099/TaintedWebClient.ql +++ b/csharp/ql/src/experimental/CWE-099/TaintedWebClient.ql @@ -7,6 +7,7 @@ * @precision high * @id cs/webclient-path-injection * @tags security + * experimental * external/cwe/cwe-099 * external/cwe/cwe-023 * external/cwe/cwe-036 diff --git a/csharp/ql/src/experimental/CWE-918/RequestForgery.ql b/csharp/ql/src/experimental/CWE-918/RequestForgery.ql index 53af17bb842..bdf2e588e88 100644 --- a/csharp/ql/src/experimental/CWE-918/RequestForgery.ql +++ b/csharp/ql/src/experimental/CWE-918/RequestForgery.ql @@ -6,6 +6,7 @@ * @precision high * @id cs/request-forgery * @tags security + * experimental * external/cwe/cwe-918 */ diff --git a/csharp/ql/src/experimental/Security Features/CWE-1004/CookieWithoutHttpOnly.ql b/csharp/ql/src/experimental/Security Features/CWE-1004/CookieWithoutHttpOnly.ql index 3d3b9fec0b7..5424db18b5b 100644 --- a/csharp/ql/src/experimental/Security Features/CWE-1004/CookieWithoutHttpOnly.ql +++ b/csharp/ql/src/experimental/Security Features/CWE-1004/CookieWithoutHttpOnly.ql @@ -9,6 +9,7 @@ * @precision high * @id cs/web/cookie-httponly-not-set * @tags security + * experimental * external/cwe/cwe-1004 */ diff --git a/csharp/ql/src/experimental/Security Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql b/csharp/ql/src/experimental/Security Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql index be503fe31d1..c218471ac46 100644 --- a/csharp/ql/src/experimental/Security Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql +++ b/csharp/ql/src/experimental/Security Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql @@ -4,6 +4,7 @@ * @kind problem * @tags security * cryptography + * experimental * external/cwe/cwe-327 * @id cs/azure-storage/unsafe-usage-of-client-side-encryption-version * @problem.severity error diff --git a/csharp/ql/src/experimental/Security Features/CWE-614/CookieWithoutSecure.ql b/csharp/ql/src/experimental/Security Features/CWE-614/CookieWithoutSecure.ql index dc9454333e6..d7b531b194a 100644 --- a/csharp/ql/src/experimental/Security Features/CWE-614/CookieWithoutSecure.ql +++ b/csharp/ql/src/experimental/Security Features/CWE-614/CookieWithoutSecure.ql @@ -8,6 +8,7 @@ * @precision high * @id cs/web/cookie-secure-not-set * @tags security + * experimental * external/cwe/cwe-319 * external/cwe/cwe-614 */ diff --git a/csharp/ql/src/experimental/Security Features/CWE-759/HashWithoutSalt.ql b/csharp/ql/src/experimental/Security Features/CWE-759/HashWithoutSalt.ql index a833ac79898..ab3c7f8d59c 100644 --- a/csharp/ql/src/experimental/Security Features/CWE-759/HashWithoutSalt.ql +++ b/csharp/ql/src/experimental/Security Features/CWE-759/HashWithoutSalt.ql @@ -5,6 +5,7 @@ * @problem.severity error * @id cs/hash-without-salt * @tags security + * experimental * external/cwe-759 */ diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql index 2ee7c7edb1f..f686d8f845f 100644 --- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql +++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/delegated-security-validations-always-return-true.ql @@ -4,6 +4,7 @@ * Higher precision version checks for exception throws, so less false positives are expected. * @kind problem * @tags security + * experimental * JsonWebTokenHandler * manual-verification-required * @id cs/json-webtoken-handler/delegated-security-validations-always-return-true diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql index 84c846c3a91..54a2301734d 100644 --- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql +++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/security-validation-disabled.ql @@ -3,6 +3,7 @@ * @description Check if security sensitive token validations for `JsonWebTokenHandler` are being disabled. * @kind problem * @tags security + * experimental * JsonWebTokenHandler * manual-verification-required * @id cs/json-webtoken-handler/security-validations-disabled diff --git a/csharp/ql/src/experimental/Security Features/Serialization/DefiningDatasetRelatedType.ql b/csharp/ql/src/experimental/Security Features/Serialization/DefiningDatasetRelatedType.ql index be79f2849ad..47153f926c1 100644 --- a/csharp/ql/src/experimental/Security Features/Serialization/DefiningDatasetRelatedType.ql +++ b/csharp/ql/src/experimental/Security Features/Serialization/DefiningDatasetRelatedType.ql @@ -5,6 +5,7 @@ * @problem.severity warning * @id cs/dataset-serialization/defining-dataset-related-type * @tags security + * experimental */ import csharp diff --git a/csharp/ql/src/experimental/Security Features/Serialization/DefiningPotentiallyUnsafeXmlSerializer.ql b/csharp/ql/src/experimental/Security Features/Serialization/DefiningPotentiallyUnsafeXmlSerializer.ql index 320096d6301..0e87f724b96 100644 --- a/csharp/ql/src/experimental/Security Features/Serialization/DefiningPotentiallyUnsafeXmlSerializer.ql +++ b/csharp/ql/src/experimental/Security Features/Serialization/DefiningPotentiallyUnsafeXmlSerializer.ql @@ -6,6 +6,7 @@ * @precision medium * @id cs/dataset-serialization/defining-potentially-unsafe-xml-serializer * @tags security + * experimental */ import csharp diff --git a/csharp/ql/src/experimental/Security Features/Serialization/UnsafeTypeUsedDataContractSerializer.ql b/csharp/ql/src/experimental/Security Features/Serialization/UnsafeTypeUsedDataContractSerializer.ql index 5907e4be311..00622007cbf 100644 --- a/csharp/ql/src/experimental/Security Features/Serialization/UnsafeTypeUsedDataContractSerializer.ql +++ b/csharp/ql/src/experimental/Security Features/Serialization/UnsafeTypeUsedDataContractSerializer.ql @@ -6,6 +6,7 @@ * @precision medium * @id cs/dataset-serialization/unsafe-type-used-data-contract-serializer * @tags security + * experimental */ import csharp diff --git a/csharp/ql/src/experimental/Security Features/Serialization/XmlDeserializationWithDataSet.ql b/csharp/ql/src/experimental/Security Features/Serialization/XmlDeserializationWithDataSet.ql index d4392ca4544..fbcba87bcf6 100644 --- a/csharp/ql/src/experimental/Security Features/Serialization/XmlDeserializationWithDataSet.ql +++ b/csharp/ql/src/experimental/Security Features/Serialization/XmlDeserializationWithDataSet.ql @@ -6,6 +6,7 @@ * @precision medium * @id cs/dataset-serialization/xml-deserialization-with-dataset * @tags security + * experimental */ import csharp diff --git a/csharp/ql/src/experimental/Security Features/backdoor/DangerousNativeFunctionCall.ql b/csharp/ql/src/experimental/Security Features/backdoor/DangerousNativeFunctionCall.ql index c9d247d69f3..b0f066ba70b 100644 --- a/csharp/ql/src/experimental/Security Features/backdoor/DangerousNativeFunctionCall.ql +++ b/csharp/ql/src/experimental/Security Features/backdoor/DangerousNativeFunctionCall.ql @@ -6,6 +6,7 @@ * @precision low * @id cs/backdoor/dangerous-native-functions * @tags security + * experimental * solorigate */ diff --git a/csharp/ql/src/experimental/Security Features/backdoor/PotentialTimeBomb.ql b/csharp/ql/src/experimental/Security Features/backdoor/PotentialTimeBomb.ql index 9ccbd675486..7f1d48788db 100644 --- a/csharp/ql/src/experimental/Security Features/backdoor/PotentialTimeBomb.ql +++ b/csharp/ql/src/experimental/Security Features/backdoor/PotentialTimeBomb.ql @@ -6,6 +6,7 @@ * @problem.severity warning * @id cs/backdoor/potential-time-bomb * @tags security + * experimental * solorigate */ diff --git a/csharp/ql/src/experimental/Security Features/backdoor/ProcessNameToHashTaintFlow.ql b/csharp/ql/src/experimental/Security Features/backdoor/ProcessNameToHashTaintFlow.ql index 6f5acf29f1d..17c59a338a4 100644 --- a/csharp/ql/src/experimental/Security Features/backdoor/ProcessNameToHashTaintFlow.ql +++ b/csharp/ql/src/experimental/Security Features/backdoor/ProcessNameToHashTaintFlow.ql @@ -3,6 +3,7 @@ * @description Flow from a function retrieving process name to a hash function. * @kind path-problem * @tags security + * experimental * solorigate * @problem.severity warning * @precision medium diff --git a/csharp/ql/src/experimental/ir/implementation/Opcode.qll b/csharp/ql/src/experimental/ir/implementation/Opcode.qll index c4134d240ab..b4def7fe4ae 100644 --- a/csharp/ql/src/experimental/ir/implementation/Opcode.qll +++ b/csharp/ql/src/experimental/ir/implementation/Opcode.qll @@ -30,6 +30,7 @@ private newtype TOpcode = TNegate() or TShiftLeft() or TShiftRight() or + TUnsignedShiftRight() or TBitAnd() or TBitOr() or TBitXor() or @@ -652,6 +653,15 @@ module Opcode { final override string toString() { result = "ShiftRight" } } + /** + * The `Opcode` for a `UnsignedShiftRightInstruction`. + * + * See the `UnsignedShiftRightInstruction` documentation for more details. + */ + class UnsignedShiftRight extends BinaryBitwiseOpcode, TUnsignedShiftRight { + final override string toString() { result = "UnsignedShiftRight" } + } + /** * The `Opcode` for a `BitAndInstruction`. * diff --git a/csharp/ql/src/experimental/ir/implementation/raw/Instruction.qll b/csharp/ql/src/experimental/ir/implementation/raw/Instruction.qll index 7afe954023b..0aa7c552638 100644 --- a/csharp/ql/src/experimental/ir/implementation/raw/Instruction.qll +++ b/csharp/ql/src/experimental/ir/implementation/raw/Instruction.qll @@ -1204,6 +1204,17 @@ class ShiftRightInstruction extends BinaryBitwiseInstruction { ShiftRightInstruction() { this.getOpcode() instanceof Opcode::ShiftRight } } +/** + * An instruction that shifts its left operand to the right by the number of bits specified by its + * right operand. + * + * Both operands must have an integer type. The result has the same type as the left operand. + * The leftmost bits are zero-filled. + */ +class UnsignedShiftRightInstruction extends BinaryBitwiseInstruction { + UnsignedShiftRightInstruction() { this.getOpcode() instanceof Opcode::UnsignedShiftRight } +} + /** * An instruction that performs a binary arithmetic operation involving at least one pointer * operand. diff --git a/csharp/ql/src/experimental/ir/implementation/raw/internal/TranslatedExpr.qll b/csharp/ql/src/experimental/ir/implementation/raw/internal/TranslatedExpr.qll index 1bcca401565..06391c010b4 100644 --- a/csharp/ql/src/experimental/ir/implementation/raw/internal/TranslatedExpr.qll +++ b/csharp/ql/src/experimental/ir/implementation/raw/internal/TranslatedExpr.qll @@ -1091,9 +1091,11 @@ class TranslatedCast extends TranslatedNonConstantExpr { } private Opcode binaryBitwiseOpcode(BinaryBitwiseOperation expr) { - expr instanceof LShiftExpr and result instanceof Opcode::ShiftLeft + expr instanceof LeftShiftExpr and result instanceof Opcode::ShiftLeft or - expr instanceof RShiftExpr and result instanceof Opcode::ShiftRight + expr instanceof RightShiftExpr and result instanceof Opcode::ShiftRight + or + expr instanceof UnsignedRightShiftExpr and result instanceof Opcode::UnsignedShiftRight or expr instanceof BitwiseAndExpr and result instanceof Opcode::BitAnd or @@ -1377,8 +1379,9 @@ class TranslatedAssignOperation extends TranslatedAssignment { private Type getConvertedLeftOperandType() { if - expr instanceof AssignLShiftExpr or - expr instanceof AssignRShiftExpr + expr instanceof AssignLeftShiftExpr or + expr instanceof AssignRightShiftExpr or + expr instanceof AssignUnsighedRightShiftExpr then result = this.getLeftOperand().getResultType() else // The right operand has already been converted to the type of the op. @@ -1416,9 +1419,11 @@ class TranslatedAssignOperation extends TranslatedAssignment { or expr instanceof AssignXorExpr and result instanceof Opcode::BitXor or - expr instanceof AssignLShiftExpr and result instanceof Opcode::ShiftLeft + expr instanceof AssignLeftShiftExpr and result instanceof Opcode::ShiftLeft or - expr instanceof AssignRShiftExpr and result instanceof Opcode::ShiftRight + expr instanceof AssignRightShiftExpr and result instanceof Opcode::ShiftRight + or + expr instanceof AssignUnsighedRightShiftExpr and result instanceof Opcode::UnsignedShiftRight } override predicate hasInstruction(Opcode opcode, InstructionTag tag, CSharpType resultType) { diff --git a/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/Instruction.qll b/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/Instruction.qll index 7afe954023b..0aa7c552638 100644 --- a/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/Instruction.qll +++ b/csharp/ql/src/experimental/ir/implementation/unaliased_ssa/Instruction.qll @@ -1204,6 +1204,17 @@ class ShiftRightInstruction extends BinaryBitwiseInstruction { ShiftRightInstruction() { this.getOpcode() instanceof Opcode::ShiftRight } } +/** + * An instruction that shifts its left operand to the right by the number of bits specified by its + * right operand. + * + * Both operands must have an integer type. The result has the same type as the left operand. + * The leftmost bits are zero-filled. + */ +class UnsignedShiftRightInstruction extends BinaryBitwiseInstruction { + UnsignedShiftRightInstruction() { this.getOpcode() instanceof Opcode::UnsignedShiftRight } +} + /** * An instruction that performs a binary arithmetic operation involving at least one pointer * operand. diff --git a/csharp/ql/src/experimental/ir/rangeanalysis/SignAnalysis.qll b/csharp/ql/src/experimental/ir/rangeanalysis/SignAnalysis.qll index 44548e0517a..b74f7c90db5 100644 --- a/csharp/ql/src/experimental/ir/rangeanalysis/SignAnalysis.qll +++ b/csharp/ql/src/experimental/ir/rangeanalysis/SignAnalysis.qll @@ -522,6 +522,8 @@ module SignAnalysisCached { i instanceof ShiftRightInstruction and not i.getResultType().(IntegralType) instanceof SignedIntegralType and result = s1.urshift(s2) + or + i instanceof UnsignedShiftRightInstruction and result = s1.urshift(s2) ) or // use hasGuard here? diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index be7c133e050..3af761588f5 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 0.5.1-dev +version: 0.5.2-dev groups: - csharp - queries diff --git a/csharp/ql/src/utils/model-generator/CaptureDiscardedSummaryModels.ql b/csharp/ql/src/utils/model-generator/CaptureDiscardedSummaryModels.ql deleted file mode 100644 index 695a928e2f8..00000000000 --- a/csharp/ql/src/utils/model-generator/CaptureDiscardedSummaryModels.ql +++ /dev/null @@ -1,13 +0,0 @@ -/** - * @name Capture discarded summary models. - * @description Finds summary models that are discarded as handwritten counterparts exist. - * @id cs/utils/model-generator/discarded-summary-models - */ - -import semmle.code.csharp.dataflow.ExternalFlow -import utils.modelgenerator.internal.CaptureModels -import utils.modelgenerator.internal.CaptureSummaryFlow - -from DataFlowTargetApi api, string flow -where flow = captureFlow(api) and hasSummary(api, false) -select flow order by flow diff --git a/csharp/ql/src/utils/model-generator/CaptureNeutralModels.ql b/csharp/ql/src/utils/model-generator/CaptureNeutralModels.ql deleted file mode 100644 index 9cf2b81ba7c..00000000000 --- a/csharp/ql/src/utils/model-generator/CaptureNeutralModels.ql +++ /dev/null @@ -1,17 +0,0 @@ -/** - * @name Capture neutral models. - * @description Finds neutral models to be used by other queries. - * @kind diagnostic - * @id cs/utils/model-generator/neutral-models - * @tags model-generator - */ - -import semmle.code.csharp.dataflow.ExternalFlow -import utils.modelgenerator.internal.CaptureModels -import utils.modelgenerator.internal.CaptureSummaryFlow - -from DataFlowTargetApi api, string noflow -where - noflow = captureNoFlow(api) and - not hasSummary(api, false) -select noflow order by noflow diff --git a/csharp/ql/src/utils/model-generator/CaptureSummaryModels.ql b/csharp/ql/src/utils/model-generator/CaptureSummaryModels.ql deleted file mode 100644 index 0dd22e3babb..00000000000 --- a/csharp/ql/src/utils/model-generator/CaptureSummaryModels.ql +++ /dev/null @@ -1,15 +0,0 @@ -/** - * @name Capture summary models. - * @description Finds applicable summary models to be used by other queries. - * @kind diagnostic - * @id cs/utils/model-generator/summary-models - * @tags model-generator - */ - -import semmle.code.csharp.dataflow.ExternalFlow -import utils.modelgenerator.internal.CaptureModels -import utils.modelgenerator.internal.CaptureSummaryFlow - -from DataFlowTargetApi api, string flow -where flow = captureFlow(api) and not hasSummary(api, false) -select flow order by flow diff --git a/csharp/ql/src/utils/modelgenerator/CaptureDiscardedSummaryModels.ql b/csharp/ql/src/utils/modelgenerator/CaptureDiscardedSummaryModels.ql new file mode 100644 index 00000000000..3a2a3454900 --- /dev/null +++ b/csharp/ql/src/utils/modelgenerator/CaptureDiscardedSummaryModels.ql @@ -0,0 +1,15 @@ +/** + * @name Capture discarded summary models. + * @description Finds summary models that are discarded as handwritten counterparts exist. + * @id cs/utils/modelgenerator/discarded-summary-models + */ + +import semmle.code.csharp.dataflow.internal.FlowSummaryImpl as FlowSummaryImpl +import internal.CaptureModels +import internal.CaptureSummaryFlow + +from DataFlowTargetApi api, string flow +where + flow = captureFlow(api) and + api.(FlowSummaryImpl::Public::SummarizedCallable).isManual() +select flow order by flow diff --git a/csharp/ql/src/utils/modelgenerator/CaptureNeutralModels.ql b/csharp/ql/src/utils/modelgenerator/CaptureNeutralModels.ql new file mode 100644 index 00000000000..933df8c765a --- /dev/null +++ b/csharp/ql/src/utils/modelgenerator/CaptureNeutralModels.ql @@ -0,0 +1,17 @@ +/** + * @name Capture neutral models. + * @description Finds neutral models to be used by other queries. + * @kind diagnostic + * @id cs/utils/modelgenerator/neutral-models + * @tags modelgenerator + */ + +import semmle.code.csharp.dataflow.internal.FlowSummaryImpl as FlowSummaryImpl +import internal.CaptureModels +import internal.CaptureSummaryFlow + +from DataFlowTargetApi api, string noflow +where + noflow = captureNoFlow(api) and + not api.(FlowSummaryImpl::Public::SummarizedCallable).isManual() +select noflow order by noflow diff --git a/csharp/ql/src/utils/model-generator/CaptureSinkModels.ql b/csharp/ql/src/utils/modelgenerator/CaptureSinkModels.ql similarity index 74% rename from csharp/ql/src/utils/model-generator/CaptureSinkModels.ql rename to csharp/ql/src/utils/modelgenerator/CaptureSinkModels.ql index 68b3ec91974..bba5081c223 100644 --- a/csharp/ql/src/utils/model-generator/CaptureSinkModels.ql +++ b/csharp/ql/src/utils/modelgenerator/CaptureSinkModels.ql @@ -2,11 +2,11 @@ * @name Capture sink models. * @description Finds public methods that act as sinks as they flow into a known sink. * @kind diagnostic - * @id cs/utils/model-generator/sink-models - * @tags model-generator + * @id cs/utils/modelgenerator/sink-models + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureModels +import internal.CaptureModels class Activate extends ActiveConfiguration { override predicate activateToSinkConfig() { any() } diff --git a/csharp/ql/src/utils/model-generator/CaptureSourceModels.ql b/csharp/ql/src/utils/modelgenerator/CaptureSourceModels.ql similarity index 74% rename from csharp/ql/src/utils/model-generator/CaptureSourceModels.ql rename to csharp/ql/src/utils/modelgenerator/CaptureSourceModels.ql index 9c3c87d8251..f504a291d7e 100644 --- a/csharp/ql/src/utils/model-generator/CaptureSourceModels.ql +++ b/csharp/ql/src/utils/modelgenerator/CaptureSourceModels.ql @@ -2,11 +2,11 @@ * @name Capture source models. * @description Finds APIs that act as sources as they expose already known sources. * @kind diagnostic - * @id cs/utils/model-generator/source-models - * @tags model-generator + * @id cs/utils/modelgenerator/source-models + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureModels +import internal.CaptureModels class Activate extends ActiveConfiguration { override predicate activateFromSourceConfig() { any() } diff --git a/csharp/ql/src/utils/modelgenerator/CaptureSummaryModels.ql b/csharp/ql/src/utils/modelgenerator/CaptureSummaryModels.ql new file mode 100644 index 00000000000..641c260adf8 --- /dev/null +++ b/csharp/ql/src/utils/modelgenerator/CaptureSummaryModels.ql @@ -0,0 +1,15 @@ +/** + * @name Capture summary models. + * @description Finds applicable summary models to be used by other queries. + * @kind diagnostic + * @id cs/utils/modelgenerator/summary-models + * @tags modelgenerator + */ + +import semmle.code.csharp.dataflow.internal.FlowSummaryImpl as FlowSummaryImpl +import internal.CaptureModels +import internal.CaptureSummaryFlow + +from DataFlowTargetApi api, string flow +where flow = captureFlow(api) and not api.(FlowSummaryImpl::Public::SummarizedCallable).isManual() +select flow order by flow diff --git a/csharp/ql/src/utils/model-generator/CaptureTypeBasedSummaryModels.ql b/csharp/ql/src/utils/modelgenerator/CaptureTypeBasedSummaryModels.ql similarity index 62% rename from csharp/ql/src/utils/model-generator/CaptureTypeBasedSummaryModels.ql rename to csharp/ql/src/utils/modelgenerator/CaptureTypeBasedSummaryModels.ql index f15a786f53f..19bec058d40 100644 --- a/csharp/ql/src/utils/model-generator/CaptureTypeBasedSummaryModels.ql +++ b/csharp/ql/src/utils/modelgenerator/CaptureTypeBasedSummaryModels.ql @@ -2,11 +2,11 @@ * @name Capture typed based summary models. * @description Finds applicable summary models to be used by other queries. * @kind diagnostic - * @id cs/utils/model-generator/summary-models-typed-based - * @tags model-generator + * @id cs/utils/modelgenerator/summary-models-typed-based + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureTypeBasedSummaryModels +import internal.CaptureTypeBasedSummaryModels from TypeBasedFlowTargetApi api, string flow where flow = captureFlow(api) diff --git a/csharp/ql/src/utils/model-generator/GenerateFlowModel.py b/csharp/ql/src/utils/modelgenerator/GenerateFlowModel.py similarity index 100% rename from csharp/ql/src/utils/model-generator/GenerateFlowModel.py rename to csharp/ql/src/utils/modelgenerator/GenerateFlowModel.py diff --git a/csharp/ql/test/experimental/ir/ir/PrintAst.expected b/csharp/ql/test/experimental/ir/ir/PrintAst.expected index 41b5b6daead..cc96a82bbc1 100644 --- a/csharp/ql/test/experimental/ir/ir/PrintAst.expected +++ b/csharp/ql/test/experimental/ir/ir/PrintAst.expected @@ -118,59 +118,63 @@ array.cs: # 20| 0: [IntLiteral] 1 assignop.cs: # 3| [Class] AssignOp -# 4| 5: [Method] Main -# 4| -1: [TypeMention] Void -# 4| 4: [BlockStmt] {...} -# 5| 0: [LocalVariableDeclStmt] ... ...; -# 5| 0: [LocalVariableDeclAndInitExpr] Int32 a = ... -# 5| -1: [TypeMention] int -# 5| 0: [LocalVariableAccess] access to local variable a -# 5| 1: [IntLiteral] 1 -# 6| 1: [LocalVariableDeclStmt] ... ...; -# 6| 0: [LocalVariableDeclAndInitExpr] Int32 c = ... -# 6| -1: [TypeMention] int -# 6| 0: [LocalVariableAccess] access to local variable c -# 6| 1: [IntLiteral] 1 -# 8| 2: [ExprStmt] ...; -# 8| 0: [AssignAddExpr] ... += ... +# 5| 5: [Method] Main +# 5| -1: [TypeMention] Void +# 6| 4: [BlockStmt] {...} +# 7| 0: [LocalVariableDeclStmt] ... ...; +# 7| 0: [LocalVariableDeclAndInitExpr] Int32 a = ... +# 7| -1: [TypeMention] int +# 7| 0: [LocalVariableAccess] access to local variable a +# 7| 1: [IntLiteral] 1 +# 8| 1: [LocalVariableDeclStmt] ... ...; +# 8| 0: [LocalVariableDeclAndInitExpr] Int32 c = ... +# 8| -1: [TypeMention] int # 8| 0: [LocalVariableAccess] access to local variable c -# 8| 1: [LocalVariableAccess] access to local variable a -# 9| 3: [ExprStmt] ...; -# 9| 0: [AssignSubExpr] ... -= ... -# 9| 0: [LocalVariableAccess] access to local variable c -# 9| 1: [LocalVariableAccess] access to local variable a -# 10| 4: [ExprStmt] ...; -# 10| 0: [AssignMulExpr] ... *= ... +# 8| 1: [IntLiteral] 1 +# 10| 2: [ExprStmt] ...; +# 10| 0: [AssignAddExpr] ... += ... # 10| 0: [LocalVariableAccess] access to local variable c # 10| 1: [LocalVariableAccess] access to local variable a -# 11| 5: [ExprStmt] ...; -# 11| 0: [AssignDivExpr] ... /= ... +# 11| 3: [ExprStmt] ...; +# 11| 0: [AssignSubExpr] ... -= ... # 11| 0: [LocalVariableAccess] access to local variable c # 11| 1: [LocalVariableAccess] access to local variable a -# 12| 6: [ExprStmt] ...; -# 12| 0: [AssignRemExpr] ... %= ... +# 12| 4: [ExprStmt] ...; +# 12| 0: [AssignMulExpr] ... *= ... # 12| 0: [LocalVariableAccess] access to local variable c # 12| 1: [LocalVariableAccess] access to local variable a -# 13| 7: [ExprStmt] ...; -# 13| 0: [AssignLShiftExpr] ... <<= ... +# 13| 5: [ExprStmt] ...; +# 13| 0: [AssignDivExpr] ... /= ... # 13| 0: [LocalVariableAccess] access to local variable c -# 13| 1: [IntLiteral] 2 -# 14| 8: [ExprStmt] ...; -# 14| 0: [AssignRShiftExpr] ... >>= ... +# 13| 1: [LocalVariableAccess] access to local variable a +# 14| 6: [ExprStmt] ...; +# 14| 0: [AssignRemExpr] ... %= ... # 14| 0: [LocalVariableAccess] access to local variable c -# 14| 1: [IntLiteral] 2 -# 15| 9: [ExprStmt] ...; -# 15| 0: [AssignAndExpr] ... &= ... +# 14| 1: [LocalVariableAccess] access to local variable a +# 15| 7: [ExprStmt] ...; +# 15| 0: [AssignLeftShiftExpr] ... <<= ... # 15| 0: [LocalVariableAccess] access to local variable c # 15| 1: [IntLiteral] 2 -# 16| 10: [ExprStmt] ...; -# 16| 0: [AssignXorExpr] ... ^= ... +# 16| 8: [ExprStmt] ...; +# 16| 0: [AssignRightShiftExpr] ... >>= ... # 16| 0: [LocalVariableAccess] access to local variable c # 16| 1: [IntLiteral] 2 -# 17| 11: [ExprStmt] ...; -# 17| 0: [AssignOrExpr] ... |= ... +# 17| 9: [ExprStmt] ...; +# 17| 0: [AssignAndExpr] ... &= ... # 17| 0: [LocalVariableAccess] access to local variable c # 17| 1: [IntLiteral] 2 +# 18| 10: [ExprStmt] ...; +# 18| 0: [AssignXorExpr] ... ^= ... +# 18| 0: [LocalVariableAccess] access to local variable c +# 18| 1: [IntLiteral] 2 +# 19| 11: [ExprStmt] ...; +# 19| 0: [AssignOrExpr] ... |= ... +# 19| 0: [LocalVariableAccess] access to local variable c +# 19| 1: [IntLiteral] 2 +# 20| 12: [ExprStmt] ...; +# 20| 0: [AssignUnsighedRightShiftExpr] ... >>>= ... +# 20| 0: [LocalVariableAccess] access to local variable c +# 20| 1: [IntLiteral] 2 casts.cs: # 1| [Class] Casts_A # 5| [Class] Casts_B diff --git a/csharp/ql/test/experimental/ir/ir/assignop.cs b/csharp/ql/test/experimental/ir/ir/assignop.cs index f5c2a6fa19d..21fdfccbcf9 100644 --- a/csharp/ql/test/experimental/ir/ir/assignop.cs +++ b/csharp/ql/test/experimental/ir/ir/assignop.cs @@ -1,19 +1,22 @@ using System; -class AssignOp { - static void Main() { +class AssignOp +{ + static void Main() + { int a = 1; int c = 1; - - c += a; + + c += a; c -= a; - c *= a; + c *= a; c /= a; - c %= a; - c <<= 2; - c >>= 2; - c &= 2; - c ^= 2; + c %= a; + c <<= 2; + c >>= 2; + c &= 2; + c ^= 2; c |= 2; + c >>>= 2; } } diff --git a/csharp/ql/test/experimental/ir/ir/raw_ir.expected b/csharp/ql/test/experimental/ir/ir/raw_ir.expected index bf639694da5..2461e6602b9 100644 --- a/csharp/ql/test/experimental/ir/ir/raw_ir.expected +++ b/csharp/ql/test/experimental/ir/ir/raw_ir.expected @@ -145,74 +145,79 @@ array.cs: # 13| v13_6(Void) = ExitFunction : assignop.cs: -# 4| System.Void AssignOp.Main() -# 4| Block 0 -# 4| v4_1(Void) = EnterFunction : -# 4| mu4_2() = AliasedDefinition : -# 5| r5_1(glval) = VariableAddress[a] : -# 5| r5_2(Int32) = Constant[1] : -# 5| mu5_3(Int32) = Store[a] : &:r5_1, r5_2 -# 6| r6_1(glval) = VariableAddress[c] : -# 6| r6_2(Int32) = Constant[1] : -# 6| mu6_3(Int32) = Store[c] : &:r6_1, r6_2 -# 8| r8_1(glval) = VariableAddress[a] : -# 8| r8_2(Int32) = Load[a] : &:r8_1, ~m? -# 8| r8_3(glval) = VariableAddress[c] : -# 8| r8_4(Int32) = Load[c] : &:r8_3, ~m? -# 8| r8_5(Int32) = Add : r8_4, r8_2 -# 8| mu8_6(Int32) = Store[c] : &:r8_3, r8_5 -# 9| r9_1(glval) = VariableAddress[a] : -# 9| r9_2(Int32) = Load[a] : &:r9_1, ~m? -# 9| r9_3(glval) = VariableAddress[c] : -# 9| r9_4(Int32) = Load[c] : &:r9_3, ~m? -# 9| r9_5(Int32) = Sub : r9_4, r9_2 -# 9| mu9_6(Int32) = Store[c] : &:r9_3, r9_5 +# 5| System.Void AssignOp.Main() +# 5| Block 0 +# 5| v5_1(Void) = EnterFunction : +# 5| mu5_2() = AliasedDefinition : +# 7| r7_1(glval) = VariableAddress[a] : +# 7| r7_2(Int32) = Constant[1] : +# 7| mu7_3(Int32) = Store[a] : &:r7_1, r7_2 +# 8| r8_1(glval) = VariableAddress[c] : +# 8| r8_2(Int32) = Constant[1] : +# 8| mu8_3(Int32) = Store[c] : &:r8_1, r8_2 # 10| r10_1(glval) = VariableAddress[a] : # 10| r10_2(Int32) = Load[a] : &:r10_1, ~m? # 10| r10_3(glval) = VariableAddress[c] : # 10| r10_4(Int32) = Load[c] : &:r10_3, ~m? -# 10| r10_5(Int32) = Mul : r10_4, r10_2 +# 10| r10_5(Int32) = Add : r10_4, r10_2 # 10| mu10_6(Int32) = Store[c] : &:r10_3, r10_5 # 11| r11_1(glval) = VariableAddress[a] : # 11| r11_2(Int32) = Load[a] : &:r11_1, ~m? # 11| r11_3(glval) = VariableAddress[c] : # 11| r11_4(Int32) = Load[c] : &:r11_3, ~m? -# 11| r11_5(Int32) = Div : r11_4, r11_2 +# 11| r11_5(Int32) = Sub : r11_4, r11_2 # 11| mu11_6(Int32) = Store[c] : &:r11_3, r11_5 # 12| r12_1(glval) = VariableAddress[a] : # 12| r12_2(Int32) = Load[a] : &:r12_1, ~m? # 12| r12_3(glval) = VariableAddress[c] : # 12| r12_4(Int32) = Load[c] : &:r12_3, ~m? -# 12| r12_5(Int32) = Rem : r12_4, r12_2 +# 12| r12_5(Int32) = Mul : r12_4, r12_2 # 12| mu12_6(Int32) = Store[c] : &:r12_3, r12_5 -# 13| r13_1(Int32) = Constant[2] : -# 13| r13_2(glval) = VariableAddress[c] : -# 13| r13_3(Int32) = Load[c] : &:r13_2, ~m? -# 13| r13_4(Int32) = ShiftLeft : r13_3, r13_1 -# 13| mu13_5(Int32) = Store[c] : &:r13_2, r13_4 -# 14| r14_1(Int32) = Constant[2] : -# 14| r14_2(glval) = VariableAddress[c] : -# 14| r14_3(Int32) = Load[c] : &:r14_2, ~m? -# 14| r14_4(Int32) = ShiftRight : r14_3, r14_1 -# 14| mu14_5(Int32) = Store[c] : &:r14_2, r14_4 +# 13| r13_1(glval) = VariableAddress[a] : +# 13| r13_2(Int32) = Load[a] : &:r13_1, ~m? +# 13| r13_3(glval) = VariableAddress[c] : +# 13| r13_4(Int32) = Load[c] : &:r13_3, ~m? +# 13| r13_5(Int32) = Div : r13_4, r13_2 +# 13| mu13_6(Int32) = Store[c] : &:r13_3, r13_5 +# 14| r14_1(glval) = VariableAddress[a] : +# 14| r14_2(Int32) = Load[a] : &:r14_1, ~m? +# 14| r14_3(glval) = VariableAddress[c] : +# 14| r14_4(Int32) = Load[c] : &:r14_3, ~m? +# 14| r14_5(Int32) = Rem : r14_4, r14_2 +# 14| mu14_6(Int32) = Store[c] : &:r14_3, r14_5 # 15| r15_1(Int32) = Constant[2] : # 15| r15_2(glval) = VariableAddress[c] : # 15| r15_3(Int32) = Load[c] : &:r15_2, ~m? -# 15| r15_4(Int32) = BitAnd : r15_3, r15_1 +# 15| r15_4(Int32) = ShiftLeft : r15_3, r15_1 # 15| mu15_5(Int32) = Store[c] : &:r15_2, r15_4 # 16| r16_1(Int32) = Constant[2] : # 16| r16_2(glval) = VariableAddress[c] : # 16| r16_3(Int32) = Load[c] : &:r16_2, ~m? -# 16| r16_4(Int32) = BitXor : r16_3, r16_1 +# 16| r16_4(Int32) = ShiftRight : r16_3, r16_1 # 16| mu16_5(Int32) = Store[c] : &:r16_2, r16_4 # 17| r17_1(Int32) = Constant[2] : # 17| r17_2(glval) = VariableAddress[c] : # 17| r17_3(Int32) = Load[c] : &:r17_2, ~m? -# 17| r17_4(Int32) = BitOr : r17_3, r17_1 +# 17| r17_4(Int32) = BitAnd : r17_3, r17_1 # 17| mu17_5(Int32) = Store[c] : &:r17_2, r17_4 -# 4| v4_3(Void) = ReturnVoid : -# 4| v4_4(Void) = AliasedUse : ~m? -# 4| v4_5(Void) = ExitFunction : +# 18| r18_1(Int32) = Constant[2] : +# 18| r18_2(glval) = VariableAddress[c] : +# 18| r18_3(Int32) = Load[c] : &:r18_2, ~m? +# 18| r18_4(Int32) = BitXor : r18_3, r18_1 +# 18| mu18_5(Int32) = Store[c] : &:r18_2, r18_4 +# 19| r19_1(Int32) = Constant[2] : +# 19| r19_2(glval) = VariableAddress[c] : +# 19| r19_3(Int32) = Load[c] : &:r19_2, ~m? +# 19| r19_4(Int32) = BitOr : r19_3, r19_1 +# 19| mu19_5(Int32) = Store[c] : &:r19_2, r19_4 +# 20| r20_1(Int32) = Constant[2] : +# 20| r20_2(glval) = VariableAddress[c] : +# 20| r20_3(Int32) = Load[c] : &:r20_2, ~m? +# 20| r20_4(Int32) = UnsignedShiftRight : r20_3, r20_1 +# 20| mu20_5(Int32) = Store[c] : &:r20_2, r20_4 +# 5| v5_3(Void) = ReturnVoid : +# 5| v5_4(Void) = AliasedUse : ~m? +# 5| v5_5(Void) = ExitFunction : casts.cs: # 11| System.Void Casts.Main() diff --git a/csharp/ql/test/library-tests/cil/attributes/attribute.expected b/csharp/ql/test/library-tests/cil/attributes/attribute.expected index caf7df91c55..3c628a863fe 100644 --- a/csharp/ql/test/library-tests/cil/attributes/attribute.expected +++ b/csharp/ql/test/library-tests/cil/attributes/attribute.expected @@ -1,9 +1,93 @@ attrNoArg +| !0 | [AllowNullAttribute(...)] | +| !0 | [DisallowNullAttribute(...)] | +| !0 | [IsReadOnlyAttribute(...)] | +| !0 | [NotNullAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AddByteOffset`1(!0,System.IntPtr) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AddByteOffset`1(!0,System.IntPtr) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AddByteOffset`1(!0,System.UIntPtr) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AddByteOffset`1(!0,System.UIntPtr) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Add`1(!0,System.Int32) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Add`1(!0,System.Int32) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Add`1(!0,System.IntPtr) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Add`1(!0,System.IntPtr) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AsRef`1(!0) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AsRef`1(!0) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AsRef`1(System.Void*) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.AsRef`1(System.Void*) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.As`1(System.Object) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.As`1(System.Object) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.NullRef`1() | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.NullRef`1() | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.ReadUnaligned`1(System.Byte) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.ReadUnaligned`1(System.Byte) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.ReadUnaligned`1(System.Void*) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.ReadUnaligned`1(System.Void*) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Read`1(System.Byte) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Read`1(System.Byte) | [NonVersionableAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Read`1(System.Void*) | [IntrinsicAttribute(...)] | +| !0 Internal.Runtime.CompilerServices.Unsafe.Read`1(System.Void*) | [NonVersionableAttribute(...)] | +| !0 System.Activator.CreateInstance`1() | [IntrinsicAttribute(...)] | +| !0 System.ByReference`1.get_Value() | [IntrinsicAttribute(...)] | +| !0 System.Collections.Concurrent.ConcurrentQueue`1.d__26.get_Current() | [DebuggerHiddenAttribute(...)] | +| !0 System.Nullable`1.GetValueOrDefault(!0) | [IsReadOnlyAttribute(...)] | +| !0 System.Nullable`1.GetValueOrDefault(!0) | [NonVersionableAttribute(...)] | +| !0 System.Nullable`1.GetValueOrDefault() | [IsReadOnlyAttribute(...)] | +| !0 System.Nullable`1.GetValueOrDefault() | [NonVersionableAttribute(...)] | +| !0 System.Nullable`1.get_Value() | [IsReadOnlyAttribute(...)] | +| !0 System.Nullable`1.op_Explicit(System.Nullable) | [NonVersionableAttribute(...)] | +| !0 System.Numerics.Vector.Dot`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| !0 System.Numerics.Vector.Sum`1(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| !0 System.Numerics.Vector`1.Dot(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| !0 System.Numerics.Vector`1.GetElement(System.IntPtr) | [IsReadOnlyAttribute(...)] | +| !0 System.Numerics.Vector`1.Sum(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| !0 System.Numerics.Vector`1.get_Item(System.Int32) | [IntrinsicAttribute(...)] | +| !0 System.Numerics.Vector`1.get_Item(System.Int32) | [IsReadOnlyAttribute(...)] | | !0 System.ReadOnlySpan`1.Enumerator.Current | [IsReadOnlyAttribute(...)] | | !0 System.ReadOnlySpan`1.Item | [IsReadOnlyAttribute(...)] | +| !0 System.ReadOnlySpan`1.get_Item(System.Int32) | [IntrinsicAttribute(...)] | +| !0 System.ReadOnlySpan`1.get_Item(System.Int32) | [NonVersionableAttribute(...)] | +| !0 System.Reflection.CustomAttributeExtensions.GetCustomAttribute`1(System.Reflection.Assembly) | [ExtensionAttribute(...)] | +| !0 System.Reflection.CustomAttributeExtensions.GetCustomAttribute`1(System.Reflection.MemberInfo) | [ExtensionAttribute(...)] | +| !0 System.Reflection.CustomAttributeExtensions.GetCustomAttribute`1(System.Reflection.MemberInfo,System.Boolean) | [ExtensionAttribute(...)] | +| !0 System.Reflection.CustomAttributeExtensions.GetCustomAttribute`1(System.Reflection.Module) | [ExtensionAttribute(...)] | +| !0 System.Reflection.CustomAttributeExtensions.GetCustomAttribute`1(System.Reflection.ParameterInfo) | [ExtensionAttribute(...)] | +| !0 System.Reflection.CustomAttributeExtensions.GetCustomAttribute`1(System.Reflection.ParameterInfo,System.Boolean) | [ExtensionAttribute(...)] | +| !0 System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.GetResult() | [StackTraceHiddenAttribute(...)] | +| !0 System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() | [StackTraceHiddenAttribute(...)] | +| !0 System.Runtime.InteropServices.MemoryMarshal.d__18`1.get_Current() | [DebuggerHiddenAttribute(...)] | +| !0 System.Runtime.InteropServices.MemoryMarshal.GetArrayDataReference`1(!0[]) | [IntrinsicAttribute(...)] | +| !0 System.Runtime.InteropServices.MemoryMarshal.GetArrayDataReference`1(!0[]) | [NonVersionableAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector64.GetElement`1(System.Runtime.Intrinsics.Vector64,System.Int32) | [ExtensionAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector64.GetElement`1(System.Runtime.Intrinsics.Vector64,System.Int32) | [IntrinsicAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector64.ToScalar`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector64.ToScalar`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector128.GetElement`1(System.Runtime.Intrinsics.Vector128,System.Int32) | [ExtensionAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector128.GetElement`1(System.Runtime.Intrinsics.Vector128,System.Int32) | [IntrinsicAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector128.ToScalar`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector128.ToScalar`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector256.GetElement`1(System.Runtime.Intrinsics.Vector256,System.Int32) | [ExtensionAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector256.GetElement`1(System.Runtime.Intrinsics.Vector256,System.Int32) | [IntrinsicAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector256.ToScalar`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| !0 System.Runtime.Intrinsics.Vector256.ToScalar`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| !0 System.Span`1.get_Item(System.Int32) | [IntrinsicAttribute(...)] | +| !0 System.Span`1.get_Item(System.Int32) | [NonVersionableAttribute(...)] | +| !0 System.Threading.AsyncLocalValueChangedArgs`1.get_CurrentValue() | [CompilerGeneratedAttribute(...)] | +| !0 System.Threading.AsyncLocalValueChangedArgs`1.get_PreviousValue() | [CompilerGeneratedAttribute(...)] | +| !0 System.Threading.Interlocked.CompareExchange`1(!0,!0,!0) | [IntrinsicAttribute(...)] | +| !0 System.Threading.Tasks.SingleProducerSingleConsumerQueue`1.d__11.get_Current() | [DebuggerHiddenAttribute(...)] | +| !0 System.Threading.Tasks.Sources.ManualResetValueTaskSourceCore`1.GetResult(System.Int16) | [StackTraceHiddenAttribute(...)] | +| !0 System.Threading.Volatile.Read`1(!0) | [IntrinsicAttribute(...)] | +| !0 System.Threading.Volatile.Read`1(!0) | [NonVersionableAttribute(...)] | +| !0[] | [NotNullAttribute(...)] | +| !0[] System.GC.g__AllocateNewUninitializedArray\|66_0`1(System.Int32,System.Boolean) | [CompilerGeneratedAttribute(...)] | +| !1 Internal.Runtime.CompilerServices.Unsafe.As`2(!0) | [IntrinsicAttribute(...)] | +| !1 Internal.Runtime.CompilerServices.Unsafe.As`2(!0) | [NonVersionableAttribute(...)] | | | [CompilerGeneratedAttribute(...)] | | Internal.Runtime.InteropServices.ComponentActivator.<>c__DisplayClass13_0 | [CompilerGeneratedAttribute(...)] | | Internal.Runtime.InteropServices.ComponentActivator.k__BackingField | [CompilerGeneratedAttribute(...)] | +| Interop.Error Interop.Sys.ConvertErrorPlatformToPal(System.Int32) | [SuppressGCTransitionAttribute(...)] | +| Interop.ErrorInfo InteropErrorExtensions.Info(Interop.Error) | [ExtensionAttribute(...)] | | Interop.HostPolicy.corehost_error_writer_fn | [UnmanagedFunctionPointerAttribute(...)] | | Interop.HostPolicy.corehost_resolve_component_dependencies_result_fn | [UnmanagedFunctionPointerAttribute(...)] | | Interop.PollEvents | [FlagsAttribute(...)] | @@ -19,6 +103,11 @@ attrNoArg | Microsoft.Win32.SafeHandles.SafeFileHandle.k__BackingField | [CompilerGeneratedAttribute(...)] | | Microsoft.Win32.SafeHandles.SafeFileHandle.ThreadPoolValueTaskSource.<>c | [CompilerGeneratedAttribute(...)] | | Microsoft.Win32.SafeHandles.SafeFileHandle.t_lastCloseErrorInfo | [ThreadStaticAttribute(...)] | +| Microsoft.Win32.SafeHandles.SafeWaitHandle | [AllowNullAttribute(...)] | +| Microsoft.Win32.SafeHandles.SafeWaitHandle System.Threading.RegisteredWaitHandle.get_Handle() | [CompilerGeneratedAttribute(...)] | +| Microsoft.Win32.SafeHandles.SafeWaitHandle System.Threading.RegisteredWaitHandle.get_UserUnregisterWaitHandle() | [CompilerGeneratedAttribute(...)] | +| Microsoft.Win32.SafeHandles.SafeWaitHandle System.Threading.WaitHandleExtensions.GetSafeWaitHandle(System.Threading.WaitHandle) | [ExtensionAttribute(...)] | +| System.Action System.Runtime.InteropServices.PosixSignalRegistration.Token.get_Handler() | [CompilerGeneratedAttribute(...)] | | System.AppContext.FirstChanceException | [CompilerGeneratedAttribute(...)] | | System.AppContext.ProcessExit | [CompilerGeneratedAttribute(...)] | | System.AppContext.UnhandledException | [CompilerGeneratedAttribute(...)] | @@ -32,13 +121,274 @@ attrNoArg | System.Array.SorterGenericArray | [IsReadOnlyAttribute(...)] | | System.Array.SorterObjectArray | [IsReadOnlyAttribute(...)] | | System.ArrayEnumerator._index | [NativeIntegerAttribute(...)] | +| System.ArraySegment System.ArraySegment`1.get_Empty() | [CompilerGeneratedAttribute(...)] | | System.ArraySegment`1 | [IsReadOnlyAttribute(...)] | | System.ArraySegment`1.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.AssemblyLoadEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Attribute System.Reflection.CustomAttributeExtensions.GetCustomAttribute(System.Reflection.Assembly,System.Type) | [ExtensionAttribute(...)] | +| System.Attribute System.Reflection.CustomAttributeExtensions.GetCustomAttribute(System.Reflection.MemberInfo,System.Type) | [ExtensionAttribute(...)] | +| System.Attribute System.Reflection.CustomAttributeExtensions.GetCustomAttribute(System.Reflection.MemberInfo,System.Type,System.Boolean) | [ExtensionAttribute(...)] | +| System.Attribute System.Reflection.CustomAttributeExtensions.GetCustomAttribute(System.Reflection.Module,System.Type) | [ExtensionAttribute(...)] | +| System.Attribute System.Reflection.CustomAttributeExtensions.GetCustomAttribute(System.Reflection.ParameterInfo,System.Type) | [ExtensionAttribute(...)] | +| System.Attribute System.Reflection.CustomAttributeExtensions.GetCustomAttribute(System.Reflection.ParameterInfo,System.Type,System.Boolean) | [ExtensionAttribute(...)] | | System.AttributeTargets | [FlagsAttribute(...)] | | System.Base64FormattingOptions | [FlagsAttribute(...)] | | System.BitConverter.<>c | [CompilerGeneratedAttribute(...)] | | System.BitConverter.IsLittleEndian | [IntrinsicAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.AreSame`1(!0,!0) | [IntrinsicAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.AreSame`1(!0,!0) | [NonVersionableAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.IsAddressGreaterThan`1(!0,!0) | [IntrinsicAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.IsAddressGreaterThan`1(!0,!0) | [NonVersionableAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.IsAddressLessThan`1(!0,!0) | [IntrinsicAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.IsAddressLessThan`1(!0,!0) | [NonVersionableAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.IsNullRef`1(!0) | [IntrinsicAttribute(...)] | +| System.Boolean Internal.Runtime.CompilerServices.Unsafe.IsNullRef`1(!0) | [NonVersionableAttribute(...)] | +| System.Boolean Internal.Runtime.InteropServices.ComponentActivator.get_IsSupported() | [CompilerGeneratedAttribute(...)] | +| System.Boolean Microsoft.Win32.SafeHandles.SafeFileHandle.get_DisableFileLocking() | [CompilerGeneratedAttribute(...)] | +| System.Boolean Microsoft.Win32.SafeHandles.SafeFileHandle.get_IsAsync() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Boolean.Equals(System.Boolean) | [NonVersionableAttribute(...)] | +| System.Boolean System.Buffers.Text.ParserHelpers.TryParseThrowFormatException`1(System.ReadOnlySpan,!0,System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Boolean System.Buffers.Text.ParserHelpers.TryParseThrowFormatException`1(System.ReadOnlySpan,!0,System.Int32) | [StackTraceHiddenAttribute(...)] | +| System.Boolean System.Byte.Equals(System.Byte) | [NonVersionableAttribute(...)] | +| System.Boolean System.Char.Equals(System.Char) | [NonVersionableAttribute(...)] | +| System.Boolean System.ComponentModel.DefaultValueAttribute.ctor>g__TryConvertFromInvariantString\|2_0(System.Type,System.String,System.Object) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.ConsoleCancelEventArgs.get_Cancel() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.ConsolePal.g__AppendToStdInReaderUntil\|83_2(System.Byte,System.IO.StdInReader,System.Span,System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.ConsolePal.g__BufferUntil\|83_1(System.Byte,System.IO.StdInReader,System.Span,System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Convert.IsSpace(System.Char) | [ExtensionAttribute(...)] | +| System.Boolean System.Diagnostics.CodeAnalysis.DoesNotReturnIfAttribute.get_ParameterValue() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Diagnostics.CodeAnalysis.MaybeNullWhenAttribute.get_ReturnValue() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Diagnostics.CodeAnalysis.MemberNotNullWhenAttribute.get_ReturnValue() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Diagnostics.CodeAnalysis.NotNullWhenAttribute.get_ReturnValue() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Diagnostics.StackFrameExtensions.HasILOffset(System.Diagnostics.StackFrame) | [ExtensionAttribute(...)] | +| System.Boolean System.Diagnostics.StackFrameExtensions.HasMethod(System.Diagnostics.StackFrame) | [ExtensionAttribute(...)] | +| System.Boolean System.Diagnostics.StackFrameExtensions.HasNativeImage(System.Diagnostics.StackFrame) | [ExtensionAttribute(...)] | +| System.Boolean System.Diagnostics.StackFrameExtensions.HasSource(System.Diagnostics.StackFrame) | [ExtensionAttribute(...)] | +| System.Boolean System.Diagnostics.Tracing.EventChannelAttribute.get_Enabled() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Diagnostics.Tracing.EventSource.get_IsSupported() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Double.IsFinite(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.IsInfinity(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.IsNaN(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.IsNegative(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.IsNegativeInfinity(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.IsNormal(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.IsPositiveInfinity(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.IsSubnormal(System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.op_Equality(System.Double,System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.op_GreaterThan(System.Double,System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.op_GreaterThanOrEqual(System.Double,System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.op_Inequality(System.Double,System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.op_LessThan(System.Double,System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Double.op_LessThanOrEqual(System.Double,System.Double) | [NonVersionableAttribute(...)] | +| System.Boolean System.Enum.HasFlag(System.Enum) | [IntrinsicAttribute(...)] | +| System.Boolean System.Globalization.GlobalizationMode.Settings.get_Invariant() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Globalization.GlobalizationMode.Settings.get_PredefinedCulturesOnly() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Guid.g__TryCompatParsing\|30_0(System.ReadOnlySpan,System.Guid.GuidResult) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.IO.Enumeration.FileSystemEnumerator`1.g__ShouldSkip\|36_0(System.IO.FileAttributes) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.IO.EnumerationOptions.get_IgnoreInaccessible() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.IO.EnumerationOptions.get_RecurseSubdirectories() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.IO.EnumerationOptions.get_ReturnSpecialDirectories() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.IO.FileStatus.g__CacheHasDirectoryFlag\|37_0(Interop.Sys.FileStatus) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.IO.FileStatus.get_InitiallyDirectory() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.IO.FileStatus.get_InitiallyDirectory() | [IsReadOnlyAttribute(...)] | +| System.Boolean System.IO.Strategies.FileStreamHelpers.get_UseNet5CompatStrategy() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Int16.Equals(System.Int16) | [NonVersionableAttribute(...)] | +| System.Boolean System.Int32.Equals(System.Int32) | [NonVersionableAttribute(...)] | +| System.Boolean System.Int64.Equals(System.Int64) | [NonVersionableAttribute(...)] | +| System.Boolean System.IntPtr.Equals(System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Boolean System.IntPtr.op_Equality(System.IntPtr,System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Boolean System.IntPtr.op_Inequality(System.IntPtr,System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Boolean System.MemoryExtensions.Contains(System.ReadOnlySpan,System.ReadOnlySpan,System.StringComparison) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.Contains`1(System.ReadOnlySpan,!0) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.Contains`1(System.Span,!0) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.EndsWith(System.ReadOnlySpan,System.ReadOnlySpan,System.StringComparison) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.EndsWithOrdinalIgnoreCase(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.EndsWith`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.EndsWith`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.Equals(System.ReadOnlySpan,System.ReadOnlySpan,System.StringComparison) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.EqualsOrdinal(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.EqualsOrdinalIgnoreCase(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.IsWhiteSpace(System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.ReadOnlySpan,System.ReadOnlySpan,System.Int32) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.Span,System.ReadOnlySpan,System.Int32) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.SequenceEqual`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.SequenceEqual`1(System.ReadOnlySpan,System.ReadOnlySpan,System.Collections.Generic.IEqualityComparer) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.SequenceEqual`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.SequenceEqual`1(System.Span,System.ReadOnlySpan,System.Collections.Generic.IEqualityComparer) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.StartsWith(System.ReadOnlySpan,System.ReadOnlySpan,System.StringComparison) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.StartsWithOrdinalIgnoreCase(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.StartsWith`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.StartsWith`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.TryWrite(System.Span,System.IFormatProvider,System.MemoryExtensions.TryWriteInterpolatedStringHandler,System.Int32) | [ExtensionAttribute(...)] | +| System.Boolean System.MemoryExtensions.TryWrite(System.Span,System.MemoryExtensions.TryWriteInterpolatedStringHandler,System.Int32) | [ExtensionAttribute(...)] | +| System.Boolean System.Nullable`1.get_HasValue() | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Nullable`1.get_HasValue() | [NonVersionableAttribute(...)] | +| System.Boolean System.Number.g__ShouldRoundUp\|80_0(System.Byte*,System.Int32,System.Number.NumberBufferKind,System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Number.g__TryFormatInt32Slow\|41_0(System.Int32,System.Int32,System.ReadOnlySpan,System.IFormatProvider,System.Span,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Number.g__TryFormatInt64Slow\|45_0(System.Int64,System.ReadOnlySpan,System.IFormatProvider,System.Span,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Number.g__TryFormatUInt32Slow\|43_0(System.UInt32,System.ReadOnlySpan,System.IFormatProvider,System.Span,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Number.g__TryFormatUInt64Slow\|47_0(System.UInt64,System.ReadOnlySpan,System.IFormatProvider,System.Span,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Numerics.Matrix3x2.Equals(System.Numerics.Matrix3x2) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Matrix3x2.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Matrix3x2.get_IsIdentity() | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Matrix4x4.g__SoftwareFallback\|65_1(System.Numerics.Matrix4x4,System.Numerics.Matrix4x4) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Numerics.Matrix4x4.g__SseImpl\|65_0(System.Numerics.Matrix4x4,System.Numerics.Matrix4x4) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Numerics.Matrix4x4.Equals(System.Numerics.Matrix4x4) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Matrix4x4.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Matrix4x4.get_IsIdentity() | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Plane.Equals(System.Numerics.Plane) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Plane.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Quaternion.Equals(System.Numerics.Quaternion) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Quaternion.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Quaternion.get_IsIdentity() | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector2.Equals(System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector2.Equals(System.Numerics.Vector2) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector2.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector2.TryCopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector2.op_Equality(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector2.op_Inequality(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector3.Equals(System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector3.Equals(System.Numerics.Vector3) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector3.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector3.TryCopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector3.op_Equality(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector3.op_Inequality(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector4.Equals(System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector4.Equals(System.Numerics.Vector4) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector4.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector4.TryCopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector4.op_Equality(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector4.op_Inequality(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector.get_IsHardwareAccelerated() | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector`1.Equals(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector`1.Equals(System.Numerics.Vector) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector`1.Equals(System.Object) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector`1.TryCopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector`1.TryCopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Numerics.Vector`1.op_Equality(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Boolean System.Numerics.Vector`1.op_Inequality(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Boolean System.Object.ReferenceEquals(System.Object,System.Object) | [NonVersionableAttribute(...)] | +| System.Boolean System.ObsoleteAttribute.get_IsError() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.ReadOnlySpan`1.get_IsEmpty() | [NonVersionableAttribute(...)] | +| System.Boolean System.Reflection.AssemblyDelaySignAttribute.get_DelaySign() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.CustomAttributeExtensions.IsDefined(System.Reflection.Assembly,System.Type) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.CustomAttributeExtensions.IsDefined(System.Reflection.MemberInfo,System.Type) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.CustomAttributeExtensions.IsDefined(System.Reflection.MemberInfo,System.Type,System.Boolean) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.CustomAttributeExtensions.IsDefined(System.Reflection.Module,System.Type) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.CustomAttributeExtensions.IsDefined(System.Reflection.ParameterInfo,System.Type) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.CustomAttributeExtensions.IsDefined(System.Reflection.ParameterInfo,System.Type,System.Boolean) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.Metadata.AssemblyExtensions.TryGetRawMetadata(System.Reflection.Assembly,System.Byte*,System.Int32) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.Metadata.MetadataUpdater.get_IsSupported() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.NullabilityInfoContext.get_IsSupported() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.ObfuscateAssemblyAttribute.get_AssemblyIsPrivate() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.ObfuscateAssemblyAttribute.get_StripAfterObfuscation() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.ObfuscationAttribute.get_ApplyToMembers() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.ObfuscationAttribute.get_Exclude() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.ObfuscationAttribute.get_StripAfterObfuscation() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Reflection.SignatureTypeExtensions.MatchesExactly(System.Reflection.SignatureType,System.Type) | [ExtensionAttribute(...)] | +| System.Boolean System.Reflection.SignatureTypeExtensions.MatchesParameterTypeExactly(System.Type,System.Reflection.ParameterInfo) | [ExtensionAttribute(...)] | +| System.Boolean System.Resources.ResourceReader.get_AllowCustomResourceTypes() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.CompilerServices.InternalsVisibleToAttribute.get_AllInternalsVisible() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.CompilerServices.RuntimeCompatibilityAttribute.get_WrapNonExceptionThrows() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.CompilerServices.RuntimeHelpers.EnumEquals`1(!0,!0) | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.CompilerServices.RuntimeHelpers.IsBitwiseEquatable`1() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.CompilerServices.RuntimeHelpers.IsPrimitiveType(System.Reflection.CorElementType) | [ExtensionAttribute(...)] | +| System.Boolean System.Runtime.CompilerServices.RuntimeHelpers.IsReferenceOrContainsReferences`1() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.BestFitMappingAttribute.get_BestFitMapping() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.ComVisibleAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.DynamicInterfaceCastableHelpers.IsInterfaceImplemented(System.Runtime.InteropServices.IDynamicInterfaceCastable,System.RuntimeType,System.Boolean) | [StackTraceHiddenAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsFinite(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsInfinity(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsNaN(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsNegative(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsNegativeInfinity(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsNormal(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsPositiveInfinity(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.IsSubnormal(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.op_Equality(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.op_GreaterThan(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.op_GreaterThanOrEqual(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.op_Inequality(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.op_LessThan(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.NFloat.op_LessThanOrEqual(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Boolean System.Runtime.InteropServices.PosixSignalContext.get_Cancel() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.AdvSimd.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.AdvSimd.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Aes.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Aes.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.ArmBase.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.ArmBase.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Crc32.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Crc32.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Dp.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Dp.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Rdm.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Rdm.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Sha1.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Sha1.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Sha256.Arm64.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Arm.Sha256.get_IsSupported() | [IntrinsicAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Vector128`1.g__SoftwareFallback\|12_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.Intrinsics.Vector256`1.g__SoftwareFallback\|14_0(System.Runtime.Intrinsics.Vector256,System.Runtime.Intrinsics.Vector256) | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.Serialization.DeserializationTracker.get_DeserializationInProgress() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.Serialization.SerializationInfo.get_IsAssemblyNameSetExplicit() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Runtime.Serialization.SerializationInfo.get_IsFullTypeNameSetExplicit() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.SByte.Equals(System.SByte) | [NonVersionableAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityAttribute.get_Unrestricted() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_Assertion() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_BindingRedirects() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_ControlAppDomain() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_ControlDomainPolicy() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_ControlEvidence() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_ControlPolicy() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_ControlPrincipal() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_ControlThread() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_Execution() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_Infrastructure() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_RemotingConfiguration() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_SerializationFormatter() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_SkipVerification() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.Permissions.SecurityPermissionAttribute.get_UnmanagedCode() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Security.SecurityRulesAttribute.get_SkipVerificationInFullTrust() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Single.IsFinite(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.IsInfinity(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.IsNaN(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.IsNegative(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.IsNegativeInfinity(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.IsNormal(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.IsPositiveInfinity(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.IsSubnormal(System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.op_Equality(System.Single,System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.op_GreaterThan(System.Single,System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.op_GreaterThanOrEqual(System.Single,System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.op_Inequality(System.Single,System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.op_LessThan(System.Single,System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Single.op_LessThanOrEqual(System.Single,System.Single) | [NonVersionableAttribute(...)] | +| System.Boolean System.Span`1.get_IsEmpty() | [NonVersionableAttribute(...)] | +| System.Boolean System.String.IsNullOrEmpty(System.String) | [NonVersionableAttribute(...)] | +| System.Boolean System.StringNormalizationExtensions.IsNormalized(System.String) | [ExtensionAttribute(...)] | +| System.Boolean System.StringNormalizationExtensions.IsNormalized(System.String,System.Text.NormalizationForm) | [ExtensionAttribute(...)] | +| System.Boolean System.Threading.AsyncLocalValueChangedArgs`1.get_ThreadContextChanged() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Threading.RegisteredWaitHandle.get_Repeating() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Threading.Tasks.Sources.ManualResetValueTaskSourceCore`1.get_RunContinuationsAsynchronously() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Threading.Tasks.Sources.ManualResetValueTaskSourceCore`1.get_RunContinuationsAsynchronously() | [IsReadOnlyAttribute(...)] | +| System.Boolean System.Threading.Tasks.TaskToApm.TaskAsyncResult.get_CompletedSynchronously() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Threading.Volatile.Read(System.Boolean) | [IntrinsicAttribute(...)] | +| System.Boolean System.Threading.Volatile.Read(System.Boolean) | [NonVersionableAttribute(...)] | +| System.Boolean System.TimeZoneInfo.get_HasIanaId() | [CompilerGeneratedAttribute(...)] | +| System.Boolean System.Type.IsAssignableFrom(System.Type) | [IntrinsicAttribute(...)] | +| System.Boolean System.Type.IsAssignableTo(System.Type) | [IntrinsicAttribute(...)] | +| System.Boolean System.Type.get_IsValueType() | [IntrinsicAttribute(...)] | +| System.Boolean System.Type.op_Equality(System.Type,System.Type) | [IntrinsicAttribute(...)] | +| System.Boolean System.Type.op_Inequality(System.Type,System.Type) | [IntrinsicAttribute(...)] | +| System.Boolean System.UInt16.Equals(System.UInt16) | [NonVersionableAttribute(...)] | +| System.Boolean System.UInt32.Equals(System.UInt32) | [NonVersionableAttribute(...)] | +| System.Boolean System.UInt64.Equals(System.UInt64) | [NonVersionableAttribute(...)] | +| System.Boolean System.UIntPtr.Equals(System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.Boolean System.UIntPtr.op_Equality(System.UIntPtr,System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.Boolean System.UIntPtr.op_Inequality(System.UIntPtr,System.UIntPtr) | [NonVersionableAttribute(...)] | | System.Buffers.StandardFormat | [IsReadOnlyAttribute(...)] | | System.Buffers.Text.Utf8Parser.ParseNumberOptions | [FlagsAttribute(...)] | | System.Buffers.TlsOverPerCoreLockedStacksArrayPool`1.<>c | [CompilerGeneratedAttribute(...)] | @@ -46,6 +396,20 @@ attrNoArg | System.ByReference`1 | [IsByRefLikeAttribute(...)] | | System.ByReference`1 | [IsReadOnlyAttribute(...)] | | System.ByReference`1 | [NonVersionableAttribute(...)] | +| System.Byte System.Diagnostics.Tracing.EventAttribute.get_Version() | [CompilerGeneratedAttribute(...)] | +| System.Byte System.Math.Max(System.Byte,System.Byte) | [NonVersionableAttribute(...)] | +| System.Byte System.Math.Min(System.Byte,System.Byte) | [NonVersionableAttribute(...)] | +| System.Byte System.Runtime.CompilerServices.CastHelpers.Unbox(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Byte System.Runtime.CompilerServices.CastHelpers.Unbox(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Byte System.Runtime.CompilerServices.CastHelpers.Unbox(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Byte System.Runtime.CompilerServices.RuntimeHelpers.GetRawData(System.Object) | [ExtensionAttribute(...)] | +| System.Byte System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Byte System.Threading.Volatile.Read(System.Byte) | [IntrinsicAttribute(...)] | +| System.Byte System.Threading.Volatile.Read(System.Byte) | [NonVersionableAttribute(...)] | +| System.Byte[] System.Security.PermissionSet.ConvertPermissionSet(System.String,System.Byte[],System.String) | [ObsoleteAttribute(...)] | +| System.Char System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Char System.String.GetPinnableReference() | [NonVersionableAttribute(...)] | +| System.Char System.String.get_Chars(System.Int32) | [IntrinsicAttribute(...)] | | System.CodeDom.Compiler.IndentedTextWriter.d__22 | [CompilerGeneratedAttribute(...)] | | System.CodeDom.Compiler.IndentedTextWriter.d__36 | [CompilerGeneratedAttribute(...)] | | System.CodeDom.Compiler.IndentedTextWriter.d__37 | [CompilerGeneratedAttribute(...)] | @@ -60,12 +424,71 @@ attrNoArg | System.CodeDom.Compiler.IndentedTextWriter.d__63 | [CompilerGeneratedAttribute(...)] | | System.Collections.Concurrent.ConcurrentQueue`1.d__26 | [CompilerGeneratedAttribute(...)] | | System.Collections.Generic.BitHelper | [IsByRefLikeAttribute(...)] | +| System.Collections.Generic.Comparer System.Collections.Generic.Comparer`1.get_Default() | [CompilerGeneratedAttribute(...)] | +| System.Collections.Generic.Comparer System.Collections.Generic.Comparer`1.get_Default() | [IntrinsicAttribute(...)] | | System.Collections.Generic.Comparer`1.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Collections.Generic.EqualityComparer System.Collections.Generic.EqualityComparer`1.get_Default() | [CompilerGeneratedAttribute(...)] | +| System.Collections.Generic.EqualityComparer System.Collections.Generic.EqualityComparer`1.get_Default() | [IntrinsicAttribute(...)] | | System.Collections.Generic.EqualityComparer`1.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Collections.Generic.IDictionary System.Diagnostics.Tracing.EventCommandEventArgs.get_Arguments() | [CompilerGeneratedAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes`1(System.Reflection.Assembly) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes`1(System.Reflection.MemberInfo) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes`1(System.Reflection.MemberInfo,System.Boolean) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes`1(System.Reflection.Module) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes`1(System.Reflection.ParameterInfo) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes`1(System.Reflection.ParameterInfo,System.Boolean) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.Assembly) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.Assembly,System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.MemberInfo) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.MemberInfo,System.Boolean) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.MemberInfo,System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.MemberInfo,System.Type,System.Boolean) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.Module) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.Module,System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.ParameterInfo) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.ParameterInfo,System.Boolean) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.ParameterInfo,System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.CustomAttributeExtensions.GetCustomAttributes(System.Reflection.ParameterInfo,System.Type,System.Boolean) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.RuntimeReflectionExtensions.GetRuntimeEvents(System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.RuntimeReflectionExtensions.GetRuntimeFields(System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.RuntimeReflectionExtensions.GetRuntimeMethods(System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerable System.Reflection.RuntimeReflectionExtensions.GetRuntimeProperties(System.Type) | [ExtensionAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Runtime.InteropServices.MemoryMarshal.d__18`1.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator> System.Diagnostics.Tracing.CounterPayload.d__51.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator> System.Diagnostics.Tracing.IncrementingCounterPayload.d__39.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Threading.ThreadPool.d__79.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Threading.ThreadPool.d__78.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Threading.ThreadPool.d__77.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Runtime.Loader.AssemblyLoadContext.d__55.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Reflection.TypeInfo.d__10.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Reflection.TypeInfo.d__22.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Runtime.Loader.AssemblyLoadContext.d__85.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Runtime.Loader.LibraryNameVariation.d__5.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Threading.Tasks.ThreadPoolTaskScheduler.d__6.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.IEnumerator System.Threading.TimerQueue.d__16.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.KeyValuePair System.Diagnostics.Tracing.CounterPayload.d__51.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.KeyValuePair System.Diagnostics.Tracing.EventPayload.d__17.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Collections.Generic.KeyValuePair System.Diagnostics.Tracing.IncrementingCounterPayload.d__39.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Collections.Generic.KeyValuePair`2 | [IsReadOnlyAttribute(...)] | +| System.Collections.Generic.ReferenceEqualityComparer System.Collections.Generic.ReferenceEqualityComparer.get_Instance() | [CompilerGeneratedAttribute(...)] | | System.Collections.Generic.ReferenceEqualityComparer.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Collections.Generic.ValueListBuilder`1 | [IsByRefLikeAttribute(...)] | +| System.Collections.IEnumerator System.Diagnostics.Tracing.CounterPayload.d__51.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Diagnostics.Tracing.IncrementingCounterPayload.d__39.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Reflection.TypeInfo.d__10.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Reflection.TypeInfo.d__22.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Runtime.InteropServices.MemoryMarshal.d__18`1.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Runtime.Loader.AssemblyLoadContext.d__85.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Runtime.Loader.AssemblyLoadContext.d__55.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Runtime.Loader.LibraryNameVariation.d__5.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Threading.Tasks.ThreadPoolTaskScheduler.d__6.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Threading.ThreadPool.d__79.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Threading.ThreadPool.d__78.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Threading.ThreadPool.d__77.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.IEnumerator System.Threading.TimerQueue.d__16.GetEnumerator() | [DebuggerHiddenAttribute(...)] | +| System.Collections.ObjectModel.ReadOnlyCollection System.Diagnostics.Tracing.EventWrittenEventArgs.get_Payload() | [CompilerGeneratedAttribute(...)] | | System.ComponentModel.EditorBrowsableAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.ComponentModel.EditorBrowsableState System.ComponentModel.EditorBrowsableAttribute.get_State() | [CompilerGeneratedAttribute(...)] | | System.ConsoleCancelEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.ConsoleKeyInfo | [IsReadOnlyAttribute(...)] | | System.ConsoleModifiers | [FlagsAttribute(...)] | @@ -77,9 +500,13 @@ attrNoArg | System.DateOnly | [IsReadOnlyAttribute(...)] | | System.DateOnly.<>c | [CompilerGeneratedAttribute(...)] | | System.DateTime | [IsReadOnlyAttribute(...)] | +| System.DateTime System.Diagnostics.Tracing.EventWrittenEventArgs.get_TimeStamp() | [CompilerGeneratedAttribute(...)] | | System.DateTimeOffset | [IsReadOnlyAttribute(...)] | | System.DateTimeResult | [IsByRefLikeAttribute(...)] | +| System.Decimal System.Runtime.InteropServices.CurrencyWrapper.get_WrappedObject() | [CompilerGeneratedAttribute(...)] | +| System.Decimal System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | | System.DefaultBinder.Primitives | [FlagsAttribute(...)] | +| System.Delegate[] | [ParamArrayAttribute(...)] | | System.Diagnostics.CodeAnalysis.DoesNotReturnIfAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -88,6 +515,8 @@ attrNoArg | System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.CodeAnalysis.DynamicallyAccessedMemberTypes | [FlagsAttribute(...)] | +| System.Diagnostics.CodeAnalysis.DynamicallyAccessedMemberTypes System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.get_MemberTypes() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.CodeAnalysis.DynamicallyAccessedMemberTypes System.Diagnostics.CodeAnalysis.DynamicallyAccessedMembersAttribute.get_MemberTypes() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.CodeAnalysis.DynamicallyAccessedMembersAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.CodeAnalysis.ExcludeFromCodeCoverageAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.CodeAnalysis.MaybeNullWhenAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -118,7 +547,9 @@ attrNoArg | System.Diagnostics.Debug.t_indentLevel | [ThreadStaticAttribute(...)] | | System.Diagnostics.DebuggableAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.DebuggableAttribute.DebuggingModes | [FlagsAttribute(...)] | +| System.Diagnostics.DebuggableAttribute.DebuggingModes System.Diagnostics.DebuggableAttribute.get_DebuggingFlags() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.DebuggerBrowsableAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.DebuggerBrowsableState System.Diagnostics.DebuggerBrowsableAttribute.get_State() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.DebuggerDisplayAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.DebuggerDisplayAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.DebuggerDisplayAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -132,6 +563,8 @@ attrNoArg | System.Diagnostics.StackFrameExtensions | [ExtensionAttribute(...)] | | System.Diagnostics.StackFrameHelper.t_reentrancy | [ThreadStaticAttribute(...)] | | System.Diagnostics.Tracing.CounterPayload | [EventDataAttribute(...)] | +| System.Diagnostics.Tracing.CounterPayload System.Diagnostics.Tracing.CounterPayloadType.get_Payload() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.CounterPayload System.Diagnostics.Tracing.PollingPayloadType.get_Payload() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.CounterPayload.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.CounterPayload.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.CounterPayload.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -151,6 +584,7 @@ attrNoArg | System.Diagnostics.Tracing.DiagnosticCounter.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.DiagnosticCounter.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventActivityOptions | [FlagsAttribute(...)] | +| System.Diagnostics.Tracing.EventActivityOptions System.Diagnostics.Tracing.EventAttribute.get_ActivityOptions() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -160,18 +594,30 @@ attrNoArg | System.Diagnostics.Tracing.EventAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventChannel System.Diagnostics.Tracing.EventAttribute.get_Channel() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventChannelAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventChannelAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventChannelType System.Diagnostics.Tracing.EventChannelAttribute.get_EventChannelType() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventCommand System.Diagnostics.Tracing.EventCommandEventArgs.get_Command() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventCommandEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventCommandEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventDataAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventDataAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventDataAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventDescriptor | [IsReadOnlyAttribute(...)] | | System.Diagnostics.Tracing.EventFieldAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventFieldAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventFieldAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventFieldFormat System.Diagnostics.Tracing.EventFieldAttribute.get_Format() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventFieldTags | [FlagsAttribute(...)] | +| System.Diagnostics.Tracing.EventFieldTags System.Diagnostics.Tracing.EventFieldAttribute.get_Tags() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventFieldTags System.Diagnostics.Tracing.TraceLoggingMetadataCollector.get_Tags() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventKeywords | [FlagsAttribute(...)] | +| System.Diagnostics.Tracing.EventKeywords System.Diagnostics.Tracing.EventAttribute.get_Keywords() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventKeywords System.Diagnostics.Tracing.EventDataAttribute.get_Keywords() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventKeywords System.Diagnostics.Tracing.EventPipeEventDispatcher.EventListenerSubscription.get_MatchAnyKeywords() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventLevel System.Diagnostics.Tracing.EventAttribute.get_Level() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventLevel System.Diagnostics.Tracing.EventPipeEventDispatcher.EventListenerSubscription.get_Level() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventListener.<>c | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventListener.EventWritten | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventListener._EventSourceCreated | [CompilerGeneratedAttribute(...)] | @@ -181,7 +627,11 @@ attrNoArg | System.Diagnostics.Tracing.EventPipeEventDispatcher.EventListenerSubscription.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventProvider.<>c | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventProvider.s_returnCode | [ThreadStaticAttribute(...)] | +| System.Diagnostics.Tracing.EventSource System.Diagnostics.Tracing.DiagnosticCounter.get_EventSource() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventSource System.Diagnostics.Tracing.EventSourceCreatedEventArgs.get_EventSource() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventSource System.Diagnostics.Tracing.EventWrittenEventArgs.get_EventSource() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventSource.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventSource.EventMetadata[] | [NotNullAttribute(...)] | | System.Diagnostics.Tracing.EventSource.m_EventSourceExceptionRecurenceCount | [ThreadStaticAttribute(...)] | | System.Diagnostics.Tracing.EventSourceAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventSourceAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -189,11 +639,16 @@ attrNoArg | System.Diagnostics.Tracing.EventSourceCreatedEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventSourceSettings | [FlagsAttribute(...)] | | System.Diagnostics.Tracing.EventTags | [FlagsAttribute(...)] | +| System.Diagnostics.Tracing.EventTags System.Diagnostics.Tracing.EventAttribute.get_Tags() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventTags System.Diagnostics.Tracing.EventDataAttribute.get_Tags() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.EventTask System.Diagnostics.Tracing.EventAttribute.get_Task() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventWrittenEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventWrittenEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventWrittenEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.EventWrittenEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.IncrementingCounterPayload | [EventDataAttribute(...)] | +| System.Diagnostics.Tracing.IncrementingCounterPayload System.Diagnostics.Tracing.IncrementingEventCounterPayloadType.get_Payload() | [CompilerGeneratedAttribute(...)] | +| System.Diagnostics.Tracing.IncrementingCounterPayload System.Diagnostics.Tracing.IncrementingPollingCounterPayloadType.get_Payload() | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.IncrementingCounterPayload.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.IncrementingCounterPayload.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.IncrementingCounterPayload.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -240,8 +695,51 @@ attrNoArg | System.Diagnostics.Tracing.RuntimeEventSource.<>c | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.TraceLoggingMetadataCollector.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Diagnostics.Tracing.TraceLoggingTypeInfo.threadCache | [ThreadStaticAttribute(...)] | +| System.Diagnostics.Tracing.TraceLoggingTypeInfo[] | [ParamArrayAttribute(...)] | +| System.Double System.Diagnostics.Tracing.CounterPayload.get_Max() | [CompilerGeneratedAttribute(...)] | +| System.Double System.Diagnostics.Tracing.CounterPayload.get_Mean() | [CompilerGeneratedAttribute(...)] | +| System.Double System.Diagnostics.Tracing.CounterPayload.get_Min() | [CompilerGeneratedAttribute(...)] | +| System.Double System.Diagnostics.Tracing.CounterPayload.get_StandardDeviation() | [CompilerGeneratedAttribute(...)] | +| System.Double System.Diagnostics.Tracing.IncrementingCounterPayload.get_Increment() | [CompilerGeneratedAttribute(...)] | +| System.Double System.Math.g__SoftwareFallback\|51_0(System.Double,System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Double System.Math.Abs(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Acos(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Acosh(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Asin(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Asinh(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Atan2(System.Double,System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Atan(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Atanh(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Cbrt(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Ceiling(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Cos(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Cosh(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Exp(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Floor(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.FusedMultiplyAdd(System.Double,System.Double,System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Log2(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Log10(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Log(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Pow(System.Double,System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Round(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Sin(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Sinh(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Sqrt(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Tan(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Math.Tanh(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Runtime.InteropServices.NFloat.get_Value() | [NonVersionableAttribute(...)] | +| System.Double System.Threading.PortableThreadPool.HillClimbing.Complex.get_Imaginary() | [CompilerGeneratedAttribute(...)] | +| System.Double System.Threading.PortableThreadPool.HillClimbing.Complex.get_Imaginary() | [IsReadOnlyAttribute(...)] | +| System.Double System.Threading.PortableThreadPool.HillClimbing.Complex.get_Real() | [CompilerGeneratedAttribute(...)] | +| System.Double System.Threading.PortableThreadPool.HillClimbing.Complex.get_Real() | [IsReadOnlyAttribute(...)] | +| System.Double System.Threading.Volatile.Read(System.Double) | [IntrinsicAttribute(...)] | +| System.Double System.Threading.Volatile.Read(System.Double) | [NonVersionableAttribute(...)] | | System.Environment.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Exception System.Runtime.ExceptionServices.ExceptionDispatchInfo.SetCurrentStackTrace(System.Exception) | [StackTraceHiddenAttribute(...)] | +| System.Exception System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs.get_Exception() | [CompilerGeneratedAttribute(...)] | | System.Exception.DispatchState | [IsReadOnlyAttribute(...)] | +| System.Exception[] | [ParamArrayAttribute(...)] | +| System.Exception[] System.Reflection.ReflectionTypeLoadException.get_LoaderExceptions() | [CompilerGeneratedAttribute(...)] | | System.GCGenerationInfo | [IsReadOnlyAttribute(...)] | | System.GCGenerationInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.GCGenerationInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -250,6 +748,7 @@ attrNoArg | System.GCMemoryInfo | [IsReadOnlyAttribute(...)] | | System.Globalization.CalendarData.<>c | [CompilerGeneratedAttribute(...)] | | System.Globalization.CompareOptions | [FlagsAttribute(...)] | +| System.Globalization.CultureInfo System.Resources.ResourceFallbackManager.d__5.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Globalization.CultureInfo.s_currentThreadCulture | [ThreadStaticAttribute(...)] | | System.Globalization.CultureInfo.s_currentThreadUICulture | [ThreadStaticAttribute(...)] | | System.Globalization.CultureTypes | [FlagsAttribute(...)] | @@ -261,6 +760,7 @@ attrNoArg | System.Globalization.GlobalizationMode.Settings.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Globalization.InvariantModeCasing.<>c | [CompilerGeneratedAttribute(...)] | | System.Globalization.MonthNameStyles | [FlagsAttribute(...)] | +| System.Globalization.NumberFormatInfo System.Globalization.NumberFormatInfo.g__GetProviderNonNull\|45_0(System.IFormatProvider) | [CompilerGeneratedAttribute(...)] | | System.Globalization.NumberStyles | [FlagsAttribute(...)] | | System.Globalization.OrdinalCasing | [ExtensionAttribute(...)] | | System.Globalization.TextInfo.ToLowerConversion | [IsReadOnlyAttribute(...)] | @@ -274,6 +774,7 @@ attrNoArg | System.Globalization.TimeSpanStyles | [FlagsAttribute(...)] | | System.Guid | [IsReadOnlyAttribute(...)] | | System.Guid | [NonVersionableAttribute(...)] | +| System.Guid System.Guid.GuidResult.ToGuid() | [IsReadOnlyAttribute(...)] | | System.Half | [IsReadOnlyAttribute(...)] | | System.HexConverter.<>c | [CompilerGeneratedAttribute(...)] | | System.IO.BufferedStream.d__69 | [CompilerGeneratedAttribute(...)] | @@ -288,6 +789,8 @@ attrNoArg | System.IO.Enumeration.FileSystemEntry.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.IO.Enumeration.FileSystemEntry.<_fileNameBuffer>e__FixedBuffer | [CompilerGeneratedAttribute(...)] | | System.IO.Enumeration.FileSystemEntry.<_fileNameBuffer>e__FixedBuffer | [UnsafeValueTypeAttribute(...)] | +| System.IO.Enumeration.FileSystemEnumerable.FindPredicate System.IO.Enumeration.FileSystemEnumerable`1.get_ShouldIncludePredicate() | [CompilerGeneratedAttribute(...)] | +| System.IO.Enumeration.FileSystemEnumerable.FindPredicate System.IO.Enumeration.FileSystemEnumerable`1.get_ShouldRecursePredicate() | [CompilerGeneratedAttribute(...)] | | System.IO.Enumeration.FileSystemEnumerableFactory.<>c | [CompilerGeneratedAttribute(...)] | | System.IO.Enumeration.FileSystemEnumerableFactory.<>c__DisplayClass3_0 | [CompilerGeneratedAttribute(...)] | | System.IO.Enumeration.FileSystemEnumerableFactory.<>c__DisplayClass4_0 | [CompilerGeneratedAttribute(...)] | @@ -297,6 +800,9 @@ attrNoArg | System.IO.Enumeration.FileSystemEnumerableFactory.<>c__DisplayClass8_0 | [CompilerGeneratedAttribute(...)] | | System.IO.Enumeration.FileSystemEnumerable`1.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.IO.Enumeration.FileSystemEnumerable`1.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.IO.EnumerationOptions System.IO.EnumerationOptions.get_Compatible() | [CompilerGeneratedAttribute(...)] | +| System.IO.EnumerationOptions System.IO.EnumerationOptions.get_CompatibleRecursive() | [CompilerGeneratedAttribute(...)] | +| System.IO.EnumerationOptions System.IO.EnumerationOptions.get_Default() | [CompilerGeneratedAttribute(...)] | | System.IO.EnumerationOptions.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.IO.EnumerationOptions.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.IO.EnumerationOptions.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -316,6 +822,7 @@ attrNoArg | System.IO.File.d__79 | [CompilerGeneratedAttribute(...)] | | System.IO.FileAccess | [FlagsAttribute(...)] | | System.IO.FileAttributes | [FlagsAttribute(...)] | +| System.IO.FileAttributes System.IO.EnumerationOptions.get_AttributesToSkip() | [CompilerGeneratedAttribute(...)] | | System.IO.FileLoadException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.IO.FileLoadException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.IO.FileNotFoundException.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -323,6 +830,8 @@ attrNoArg | System.IO.FileOptions | [FlagsAttribute(...)] | | System.IO.FileShare | [FlagsAttribute(...)] | | System.IO.FileStatus.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.IO.MatchCasing System.IO.EnumerationOptions.get_MatchCasing() | [CompilerGeneratedAttribute(...)] | +| System.IO.MatchType System.IO.EnumerationOptions.get_MatchType() | [CompilerGeneratedAttribute(...)] | | System.IO.Path.<>c | [CompilerGeneratedAttribute(...)] | | System.IO.Path.Join3Payload | [IsReadOnlyAttribute(...)] | | System.IO.Path.Join4Payload | [IsReadOnlyAttribute(...)] | @@ -347,31 +856,221 @@ attrNoArg | System.IO.StreamWriter.d__37 | [CompilerGeneratedAttribute(...)] | | System.IO.StreamWriter.d__65 | [CompilerGeneratedAttribute(...)] | | System.IO.StreamWriter.d__69 | [CompilerGeneratedAttribute(...)] | +| System.IO.SyncTextReader System.ConsolePal.g__EnsureInitialized\|17_0() | [CompilerGeneratedAttribute(...)] | +| System.IO.TextReader System.Console.g__EnsureInitialized\|14_0() | [CompilerGeneratedAttribute(...)] | | System.IO.TextReader.<>c | [CompilerGeneratedAttribute(...)] | | System.IO.TextReader.d__20 | [CompilerGeneratedAttribute(...)] | | System.IO.TextReader.d__14 | [CompilerGeneratedAttribute(...)] | +| System.IO.TextWriter System.Console.g__EnsureInitialized\|28_0() | [CompilerGeneratedAttribute(...)] | +| System.IO.TextWriter System.Console.g__EnsureInitialized\|26_0() | [CompilerGeneratedAttribute(...)] | | System.IO.TextWriter.<g__WriteAsyncCore\|60_0>d | [CompilerGeneratedAttribute(...)] | | System.IO.TextWriter.<g__WriteLineAsyncCore\|66_0>d | [CompilerGeneratedAttribute(...)] | | System.IO.TextWriter.<>c | [CompilerGeneratedAttribute(...)] | | System.Index | [IsReadOnlyAttribute(...)] | +| System.Index System.Range.get_End() | [CompilerGeneratedAttribute(...)] | +| System.Index System.Range.get_Start() | [CompilerGeneratedAttribute(...)] | +| System.Int16 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.Int16) | [IntrinsicAttribute(...)] | +| System.Int16 System.Math.Max(System.Int16,System.Int16) | [NonVersionableAttribute(...)] | +| System.Int16 System.Math.Min(System.Int16,System.Int16) | [NonVersionableAttribute(...)] | +| System.Int16 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Int16 System.Threading.Volatile.Read(System.Int16) | [IntrinsicAttribute(...)] | +| System.Int16 System.Threading.Volatile.Read(System.Int16) | [NonVersionableAttribute(...)] | +| System.Int32 Internal.Runtime.CompilerServices.Unsafe.SizeOf`1() | [IntrinsicAttribute(...)] | +| System.Int32 Internal.Runtime.CompilerServices.Unsafe.SizeOf`1() | [NonVersionableAttribute(...)] | +| System.Int32 Internal.Runtime.InteropServices.ComActivator.GetClassFactoryForTypeInternal(Internal.Runtime.InteropServices.ComActivationContextInternal*) | [UnmanagedCallersOnlyAttribute(...)] | +| System.Int32 Internal.Runtime.InteropServices.ComActivator.RegisterClassForTypeInternal(Internal.Runtime.InteropServices.ComActivationContextInternal*) | [UnmanagedCallersOnlyAttribute(...)] | +| System.Int32 Internal.Runtime.InteropServices.ComActivator.UnregisterClassForTypeInternal(Internal.Runtime.InteropServices.ComActivationContextInternal*) | [UnmanagedCallersOnlyAttribute(...)] | +| System.Int32 Internal.Runtime.InteropServices.ComponentActivator.GetFunctionPointer(System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr) | [UnmanagedCallersOnlyAttribute(...)] | +| System.Int32 Internal.Runtime.InteropServices.ComponentActivator.LoadAssemblyAndGetFunctionPointer(System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr) | [UnmanagedCallersOnlyAttribute(...)] | +| System.Int32 Interop.Sys.ConvertErrorPalToPlatform(Interop.Error) | [SuppressGCTransitionAttribute(...)] | +| System.Int32 Interop.Sys.GetErrNo() | [SuppressGCTransitionAttribute(...)] | +| System.Int32 Interop.Sys.GetPlatformSignalNumber(System.Runtime.InteropServices.PosixSignal) | [SuppressGCTransitionAttribute(...)] | +| System.Int32 Interop.Sys.GetReadDirRBufferSize() | [SuppressGCTransitionAttribute(...)] | +| System.Int32 Interop.Sys.GetSignalForBreak() | [SuppressGCTransitionAttribute(...)] | +| System.Int32 Interop.Sys.LChflagsCanSetHiddenFlag() | [SuppressGCTransitionAttribute(...)] | +| System.Int32 System.Array.g__GenericBinarySearch\|83_0`1(System.Array,System.Int32,System.Int32,System.Object) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Array.g__GenericIndexOf\|108_0`1(System.Array,System.Object,System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Array.g__GenericLastIndexOf\|114_0`1(System.Array,System.Object,System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.Int32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Diagnostics.Tracing.CounterPayload.get_Count() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Diagnostics.Tracing.EventAttribute.get_EventId() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Diagnostics.Tracing.EventWrittenEventArgs.get_EventId() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Environment.get_ProcessorCount() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Globalization.ISOWeek.g__P\|8_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Globalization.IcuLocaleData.g__ResolveDigitListSeparator\|25_1(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Globalization.IcuLocaleData.g__ResolveIndex\|25_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.IO.EnumerationOptions.get_BufferSize() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.IntPtr.ToInt32() | [NonVersionableAttribute(...)] | +| System.Int32 System.IntPtr.get_Size() | [NonVersionableAttribute(...)] | +| System.Int32 System.IntPtr.op_Explicit(System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Int32 System.Math.ILogB(System.Double) | [IntrinsicAttribute(...)] | +| System.Int32 System.Math.Max(System.Int32,System.Int32) | [NonVersionableAttribute(...)] | +| System.Int32 System.Math.Min(System.Int32,System.Int32) | [NonVersionableAttribute(...)] | +| System.Int32 System.MathF.ILogB(System.Single) | [IntrinsicAttribute(...)] | +| System.Int32 System.MemoryExtensions.BinarySearch`1(System.ReadOnlySpan,System.IComparable) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.BinarySearch`1(System.Span,System.IComparable) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.ReadOnlySpan,!0,!1) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.ReadOnlySpan,!1) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.Span,!0,!1) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.Span,!1) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.CompareTo(System.ReadOnlySpan,System.ReadOnlySpan,System.StringComparison) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOf(System.ReadOnlySpan,System.ReadOnlySpan,System.StringComparison) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.ReadOnlySpan,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.ReadOnlySpan,!0,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.Span,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.Span,!0,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOf`1(System.ReadOnlySpan,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOf`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOf`1(System.Span,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.IndexOf`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOf(System.ReadOnlySpan,System.ReadOnlySpan,System.StringComparison) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.ReadOnlySpan,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.ReadOnlySpan,!0,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.Span,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.Span,!0,!0,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOf`1(System.ReadOnlySpan,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOf`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOf`1(System.Span,!0) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.LastIndexOf`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.SequenceCompareTo`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.SequenceCompareTo`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.ToLower(System.ReadOnlySpan,System.Span,System.Globalization.CultureInfo) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.ToLowerInvariant(System.ReadOnlySpan,System.Span) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.ToUpper(System.ReadOnlySpan,System.Span,System.Globalization.CultureInfo) | [ExtensionAttribute(...)] | +| System.Int32 System.MemoryExtensions.ToUpperInvariant(System.ReadOnlySpan,System.Span) | [ExtensionAttribute(...)] | +| System.Int32 System.Number.FloatingPointInfo.get_ExponentBias() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Number.FloatingPointInfo.get_MaxBinaryExponent() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Number.FloatingPointInfo.get_MinBinaryExponent() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Number.FloatingPointInfo.get_OverflowDecimalExponent() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Numerics.BitOperations.g__SoftwareFallback\|19_0(System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Numerics.BitOperations.g__SoftwareFallback\|20_0(System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Numerics.BitOperations.PopCount(System.UInt32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Numerics.BitOperations.PopCount(System.UInt64) | [IntrinsicAttribute(...)] | +| System.Int32 System.Numerics.Matrix3x2.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Matrix4x4.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Plane.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Quaternion.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Vector2.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Vector3.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Vector4.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Vector`1.GetHashCode() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Numerics.Vector`1.get_Count() | [IntrinsicAttribute(...)] | +| System.Int32 System.ReadOnlySpan`1.get_Length() | [NonVersionableAttribute(...)] | +| System.Int32 System.Resources.ResourceLocator.get_DataPosition() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.CompilerServices.CompilationRelaxationsAttribute.get_CompilationRelaxations() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.CompilerServices.FixedBufferAttribute.get_Length() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.CompilerServices.RuntimeHelpers.EnumCompareTo`1(!0,!0) | [IntrinsicAttribute(...)] | +| System.Int32 System.Runtime.CompilerServices.RuntimeHelpers.get_OffsetToStringData() | [NonVersionableAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.DispIdAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.ErrorWrapper.get_ErrorCode() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.FieldOffsetAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.LCIDConversionAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.NFloat.get_Size() | [NonVersionableAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.PosixSignalRegistration.OnPosixSignal(System.Int32,System.Runtime.InteropServices.PosixSignal) | [UnmanagedCallersOnlyAttribute(...)] | +| System.Int32 System.Runtime.InteropServices.PosixSignalRegistration.Token.get_SigNo() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Runtime.Intrinsics.Vector64`1.get_Count() | [IntrinsicAttribute(...)] | +| System.Int32 System.Runtime.Intrinsics.Vector128`1.get_Count() | [IntrinsicAttribute(...)] | +| System.Int32 System.Runtime.Intrinsics.Vector256`1.get_Count() | [IntrinsicAttribute(...)] | +| System.Int32 System.SpanHelpers.BinarySearch`2(System.ReadOnlySpan,!1) | [ExtensionAttribute(...)] | +| System.Int32 System.Span`1.get_Length() | [NonVersionableAttribute(...)] | +| System.Int32 System.String.g__GetNonRandomizedHashCodeOrdinalIgnoreCaseSlow\|47_0(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.String.get_Length() | [IntrinsicAttribute(...)] | +| System.Int32 System.Text.CodePageDataItem.get_UIFamilyCodePage() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Text.EncodingInfo.get_CodePage() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Text.Unicode.TextSegmentationUtility.Processor`1.get_CurrentCodeUnitOffset() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Text.Unicode.TextSegmentationUtility.Processor`1.get_CurrentCodeUnitOffset() | [IsReadOnlyAttribute(...)] | +| System.Int32 System.Threading.Interlocked.And(System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Threading.Interlocked.CompareExchange(System.Int32,System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Threading.Interlocked.Exchange(System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Threading.Interlocked.ExchangeAdd(System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Threading.Interlocked.Or(System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Threading.RegisteredWaitHandle.get_TimeoutDurationMs() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Threading.RegisteredWaitHandle.get_TimeoutTimeMs() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Threading.Thread.get_ManagedThreadId() | [IntrinsicAttribute(...)] | +| System.Int32 System.Threading.Thread.get_OptimalMaxSpinWaitsPerSpinIteration() | [CompilerGeneratedAttribute(...)] | +| System.Int32 System.Threading.Volatile.Read(System.Int32) | [IntrinsicAttribute(...)] | +| System.Int32 System.Threading.Volatile.Read(System.Int32) | [NonVersionableAttribute(...)] | +| System.Int32 System.UIntPtr.get_Size() | [NonVersionableAttribute(...)] | +| System.Int64 Interop.Sys.GetSystemTimeAsTicks() | [SuppressGCTransitionAttribute(...)] | +| System.Int64 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.Int64) | [IntrinsicAttribute(...)] | +| System.Int64 System.GCGenerationInfo.get_FragmentationAfterBytes() | [CompilerGeneratedAttribute(...)] | +| System.Int64 System.GCGenerationInfo.get_FragmentationBeforeBytes() | [CompilerGeneratedAttribute(...)] | +| System.Int64 System.GCGenerationInfo.get_SizeAfterBytes() | [CompilerGeneratedAttribute(...)] | +| System.Int64 System.GCGenerationInfo.get_SizeBeforeBytes() | [CompilerGeneratedAttribute(...)] | +| System.Int64 System.IntPtr.ToInt64() | [NonVersionableAttribute(...)] | +| System.Int64 System.IntPtr.op_Explicit(System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Int64 System.Math.Max(System.Int64,System.Int64) | [NonVersionableAttribute(...)] | +| System.Int64 System.Math.Min(System.Int64,System.Int64) | [NonVersionableAttribute(...)] | +| System.Int64 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Int64 System.Threading.Interlocked.And(System.Int64,System.Int64) | [IntrinsicAttribute(...)] | +| System.Int64 System.Threading.Interlocked.Or(System.Int64,System.Int64) | [IntrinsicAttribute(...)] | +| System.Int64 System.Threading.TimerQueue.get_ActiveCount() | [CompilerGeneratedAttribute(...)] | +| System.Int64 System.Threading.Volatile.Read(System.Int64) | [IntrinsicAttribute(...)] | +| System.Int64 System.Threading.Volatile.Read(System.Int64) | [NonVersionableAttribute(...)] | | System.IntPtr | [IsReadOnlyAttribute(...)] | +| System.IntPtr | [NativeIntegerAttribute(...)] | +| System.IntPtr Internal.Runtime.CompilerServices.Unsafe.ByteOffset`1(!0,!0) | [IntrinsicAttribute(...)] | +| System.IntPtr Internal.Runtime.CompilerServices.Unsafe.ByteOffset`1(!0,!0) | [NonVersionableAttribute(...)] | +| System.IntPtr System.Diagnostics.StackFrameExtensions.GetNativeIP(System.Diagnostics.StackFrame) | [ExtensionAttribute(...)] | +| System.IntPtr System.Diagnostics.StackFrameExtensions.GetNativeImageBase(System.Diagnostics.StackFrame) | [ExtensionAttribute(...)] | +| System.IntPtr System.IntPtr.Add(System.IntPtr,System.Int32) | [NonVersionableAttribute(...)] | | System.IntPtr System.IntPtr.AdditiveIdentity | [NativeIntegerAttribute(...)] | | System.IntPtr System.IntPtr.MaxValue | [NativeIntegerAttribute(...)] | | System.IntPtr System.IntPtr.MinValue | [NativeIntegerAttribute(...)] | | System.IntPtr System.IntPtr.MultiplicativeIdentity | [NativeIntegerAttribute(...)] | | System.IntPtr System.IntPtr.NegativeOne | [NativeIntegerAttribute(...)] | | System.IntPtr System.IntPtr.One | [NativeIntegerAttribute(...)] | +| System.IntPtr System.IntPtr.Subtract(System.IntPtr,System.Int32) | [NonVersionableAttribute(...)] | | System.IntPtr System.IntPtr.Zero | [NativeIntegerAttribute(...)] | +| System.IntPtr System.IntPtr.get_MaxValue() | [NonVersionableAttribute(...)] | +| System.IntPtr System.IntPtr.get_MinValue() | [NonVersionableAttribute(...)] | +| System.IntPtr System.IntPtr.op_Addition(System.IntPtr,System.Int32) | [NonVersionableAttribute(...)] | +| System.IntPtr System.IntPtr.op_Explicit(System.Int32) | [NonVersionableAttribute(...)] | +| System.IntPtr System.IntPtr.op_Explicit(System.Int64) | [NonVersionableAttribute(...)] | +| System.IntPtr System.IntPtr.op_Explicit(System.Void*) | [NonVersionableAttribute(...)] | +| System.IntPtr System.IntPtr.op_Subtraction(System.IntPtr,System.Int32) | [NonVersionableAttribute(...)] | +| System.IntPtr System.Math.Max(System.IntPtr,System.IntPtr) | [NonVersionableAttribute(...)] | +| System.IntPtr System.Math.Min(System.IntPtr,System.IntPtr) | [NonVersionableAttribute(...)] | | System.IntPtr System.Runtime.InteropServices.CLong.Value | [NativeIntegerAttribute(...)] | +| System.IntPtr System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.IntPtr System.RuntimeTypeHandle.GetValueInternal(System.RuntimeTypeHandle) | [IntrinsicAttribute(...)] | +| System.IntPtr System.StubHelpers.StubHelpers.GetStubContext() | [IntrinsicAttribute(...)] | +| System.IntPtr System.Threading.RegisteredWaitHandle.get_UserUnregisterWaitHandleValue() | [CompilerGeneratedAttribute(...)] | +| System.IntPtr System.Threading.Volatile.Read(System.IntPtr) | [IntrinsicAttribute(...)] | +| System.IntPtr System.Threading.Volatile.Read(System.IntPtr) | [NonVersionableAttribute(...)] | | System.IntPtr.Zero | [IntrinsicAttribute(...)] | | System.LazyHelper.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.LazyState System.LazyHelper.get_State() | [CompilerGeneratedAttribute(...)] | | System.LocalDataStoreSlot.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Marvin.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.MdUtf8String | [IsReadOnlyAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[]) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Index) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Int32) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Int32,System.Int32) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Range) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(System.ArraySegment) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(System.ArraySegment,System.Int32) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.AsMemory`1(System.ArraySegment,System.Int32,System.Int32) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.TrimEnd`1(System.Memory,!0) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.TrimEnd`1(System.Memory,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.TrimStart`1(System.Memory,!0) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.TrimStart`1(System.Memory,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.Trim`1(System.Memory,!0) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.Trim`1(System.Memory,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.Trim(System.Memory) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.TrimEnd(System.Memory) | [ExtensionAttribute(...)] | +| System.Memory System.MemoryExtensions.TrimStart(System.Memory) | [ExtensionAttribute(...)] | | System.MemoryExtensions | [ExtensionAttribute(...)] | | System.MemoryExtensions.TryWriteInterpolatedStringHandler | [InterpolatedStringHandlerAttribute(...)] | | System.MemoryExtensions.TryWriteInterpolatedStringHandler | [IsByRefLikeAttribute(...)] | | System.Memory`1 | [IsReadOnlyAttribute(...)] | +| System.Nullable System.Nullable`1.op_Implicit(!0) | [NonVersionableAttribute(...)] | | System.Nullable`1 | [NonVersionableAttribute(...)] | | System.Number.BigInteger | [IsByRefLikeAttribute(...)] | | System.Number.BigInteger.<_blocks>e__FixedBuffer | [CompilerGeneratedAttribute(...)] | @@ -398,9 +1097,250 @@ attrNoArg | System.Numerics.Vector | [ExtensionAttribute(...)] | | System.Numerics.Vector | [IntrinsicAttribute(...)] | | System.Numerics.Vector2 | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Matrix3x2.get_Translation() | [IsReadOnlyAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.Abs(System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.Max(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.Min(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.SquareRoot(System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.get_One() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.get_Zero() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.op_Addition(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.op_Division(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.op_Multiply(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Numerics.Vector2.op_Subtraction(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector2 System.Runtime.Intrinsics.Vector128.AsVector2(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | | System.Numerics.Vector3 | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Matrix4x4.get_Translation() | [IsReadOnlyAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.Abs(System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.Max(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.Min(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.SquareRoot(System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.get_One() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.get_Zero() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.op_Addition(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.op_Division(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.op_Multiply(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Numerics.Vector3.op_Subtraction(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector3 System.Runtime.Intrinsics.Vector128.AsVector3(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | | System.Numerics.Vector4 | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.Abs(System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.Max(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.Min(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.SquareRoot(System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.get_One() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.get_Zero() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.op_Addition(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.op_Division(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.op_Multiply(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Numerics.Vector4.op_Subtraction(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector4 System.Runtime.Intrinsics.Vector128.AsVector4(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Numerics.Vector4 System.Runtime.Intrinsics.Vector128.AsVector4(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Abs`1(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.AndNot`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConditionalSelect`1(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Equals`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThanOrEqual`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThan`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThanOrEqual`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThan`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Max`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Min`1(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.SquareRoot`1(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.Abs(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.Ceiling(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.ConditionalSelect(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.Equals(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.Floor(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.GreaterThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.GreaterThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.LessThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.LessThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.Max(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.Min(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.SquareRoot(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.get_AllBitsSet() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.get_One() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.get_Zero() | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Addition(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_BitwiseAnd(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_BitwiseOr(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Division(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_ExclusiveOr(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Multiply(!0,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Multiply(System.Numerics.Vector,!0) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Multiply(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Subtraction(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Runtime.Intrinsics.Vector128.AsVector`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Numerics.Vector System.Runtime.Intrinsics.Vector128.AsVector`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Runtime.Intrinsics.Vector256.AsVector`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Numerics.Vector System.Runtime.Intrinsics.Vector256.AsVector`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.As`2(System.Numerics.Vector) | [ExtensionAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.As`2(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Ceiling(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConditionalSelect(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToDouble(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToDouble(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Floor(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToInt32(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Equals(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Equals(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToInt64(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Equals(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Equals(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.GreaterThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThan(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.LessThanOrEqual(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Ceiling(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConditionalSelect(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToSingle(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToSingle(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Floor(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToUInt32(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector.ConvertToUInt64(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [IntrinsicAttribute(...)] | | System.Numerics.Vector`1 | [IntrinsicAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type,System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type,System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type,System.Object[],System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type,System.Object[],System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Activator.CreateInstance(System.Type,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Array.Clone() | [IntrinsicAttribute(...)] | +| System.Object System.Collections.Concurrent.ConcurrentQueue`1.d__26.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Diagnostics.Tracing.CounterPayload.d__51.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Diagnostics.Tracing.EventPayload.d__17.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Diagnostics.Tracing.IncrementingCounterPayload.d__39.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Object.MemberwiseClone() | [IntrinsicAttribute(...)] | +| System.Object System.Reflection.ConstructorInfo.Invoke(System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.ConstructorInfo.Invoke(System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.MdFieldInfo.GetValue(System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.MdFieldInfo.GetValue(System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.MdFieldInfo.GetValueDirect(System.TypedReference) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.MdFieldInfo.GetValueDirect(System.TypedReference) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.MethodBase.Invoke(System.Object,System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.MethodBase.Invoke(System.Object,System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.PropertyInfo.GetValue(System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.PropertyInfo.GetValue(System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.PropertyInfo.GetValue(System.Object,System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.PropertyInfo.GetValue(System.Object,System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RtFieldInfo.GetValue(System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RtFieldInfo.GetValue(System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RtFieldInfo.GetValueDirect(System.TypedReference) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RtFieldInfo.GetValueDirect(System.TypedReference) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RuntimeConstructorInfo.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RuntimeConstructorInfo.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RuntimeConstructorInfo.Invoke(System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RuntimeConstructorInfo.Invoke(System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RuntimeMethodInfo.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RuntimeMethodInfo.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RuntimeMethodInfo.InvokeOneParameter(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RuntimeMethodInfo.InvokeOneParameter(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RuntimePropertyInfo.GetValue(System.Object,System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RuntimePropertyInfo.GetValue(System.Object,System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.RuntimePropertyInfo.GetValue(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.RuntimePropertyInfo.GetValue(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Reflection.TypeInfo.d__10.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Reflection.TypeInfo.d__22.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Resources.ResourceFallbackManager.d__5.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Resources.ResourceLocator.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastAny(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastAny(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastAny(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastClass(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastClass(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastClass(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastClassSpecial(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastClassSpecial(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastClassSpecial(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastInterface(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastInterface(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCastInterface(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCast_Helper(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCast_Helper(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ChkCast_Helper(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfAny(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfAny(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfAny(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfClass(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfClass(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfClass(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfInterface(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfInterface(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstanceOfInterface(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstance_Helper(System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstance_Helper(System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.IsInstance_Helper(System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.LdelemaRef(System.Array,System.Int32,System.Void*) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.LdelemaRef(System.Array,System.Int32,System.Void*) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.LdelemaRef(System.Array,System.Int32,System.Void*) | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ThrowArrayMismatchException() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ThrowArrayMismatchException() | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Runtime.CompilerServices.CastHelpers.ThrowArrayMismatchException() | [StackTraceHiddenAttribute(...)] | +| System.Object System.Runtime.CompilerServices.SwitchExpressionException.get_UnmatchedValue() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Runtime.InteropServices.DefaultParameterValueAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Runtime.InteropServices.DispatchWrapper.get_WrappedObject() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Runtime.InteropServices.MemoryMarshal.d__18`1.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.InteropServices.UnknownWrapper.get_WrappedObject() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Runtime.InteropServices.VariantWrapper.get_WrappedObject() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Runtime.Loader.AssemblyLoadContext.d__85.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.Loader.AssemblyLoadContext.d__55.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Runtime.Loader.LibraryNameVariation.d__5.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.RuntimeMethodHandle.InvokeMethod(System.Object,System.Span,System.Signature,System.Boolean,System.Boolean) | [DebuggerHiddenAttribute(...)] | +| System.Object System.RuntimeMethodHandle.InvokeMethod(System.Object,System.Span,System.Signature,System.Boolean,System.Boolean) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.RuntimeType.ActivatorCache.ctor>g__ReturnNull\|4_0(System.Void*) | [CompilerGeneratedAttribute(...)] | +| System.Object System.RuntimeType.CreateInstanceDefaultCtor(System.Boolean,System.Boolean) | [DebuggerHiddenAttribute(...)] | +| System.Object System.RuntimeType.CreateInstanceDefaultCtor(System.Boolean,System.Boolean) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.RuntimeType.CreateInstanceOfT() | [DebuggerHiddenAttribute(...)] | +| System.Object System.RuntimeType.CreateInstanceOfT() | [DebuggerStepThroughAttribute(...)] | +| System.Object System.RuntimeType.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.RuntimeType.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Security.SecurityException.get_Demanded() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Security.SecurityException.get_DenySetInstance() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Security.SecurityException.get_PermitOnlySetInstance() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Threading.Tasks.SingleProducerSingleConsumerQueue`1.d__11.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Threading.Tasks.TaskToApm.TaskAsyncResult.get_AsyncState() | [CompilerGeneratedAttribute(...)] | +| System.Object System.Threading.Tasks.ThreadPoolTaskScheduler.d__6.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Threading.ThreadPool.d__79.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Threading.ThreadPool.d__78.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Threading.ThreadPool.d__77.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Threading.TimerQueue.d__16.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | | System.ObsoleteAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.ObsoleteAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.ObsoleteAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -408,16 +1348,59 @@ attrNoArg | System.ParamsArray | [IsReadOnlyAttribute(...)] | | System.ParseFlags | [FlagsAttribute(...)] | | System.Progress`1.ProgressChanged | [CompilerGeneratedAttribute(...)] | +| System.Random System.Random.get_Shared() | [CompilerGeneratedAttribute(...)] | | System.Random.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Random.ThreadSafeRandom.t_random | [ThreadStaticAttribute(...)] | | System.Range | [IsReadOnlyAttribute(...)] | | System.Range.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Range.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.TrimEnd`1(System.ReadOnlyMemory,!0) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.TrimEnd`1(System.ReadOnlyMemory,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.TrimStart`1(System.ReadOnlyMemory,!0) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.TrimStart`1(System.ReadOnlyMemory,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.Trim`1(System.ReadOnlyMemory,!0) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.Trim`1(System.ReadOnlyMemory,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.AsMemory(System.String) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.AsMemory(System.String,System.Index) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.AsMemory(System.String,System.Int32) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.AsMemory(System.String,System.Int32,System.Int32) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.AsMemory(System.String,System.Range) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.Trim(System.ReadOnlyMemory) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.TrimEnd(System.ReadOnlyMemory) | [ExtensionAttribute(...)] | +| System.ReadOnlyMemory System.MemoryExtensions.TrimStart(System.ReadOnlyMemory) | [ExtensionAttribute(...)] | | System.ReadOnlyMemory`1 | [IsReadOnlyAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimEnd`1(System.ReadOnlySpan,!0) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimEnd`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimStart`1(System.ReadOnlySpan,!0) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimStart`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.Trim`1(System.ReadOnlySpan,!0) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.Trim`1(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.IO.Enumeration.FileSystemEntry.get_Directory() | [CompilerGeneratedAttribute(...)] | +| System.ReadOnlySpan System.IO.Enumeration.FileSystemEntry.get_Directory() | [IsReadOnlyAttribute(...)] | +| System.ReadOnlySpan System.IO.Enumeration.FileSystemEntry.get_OriginalRootDirectory() | [CompilerGeneratedAttribute(...)] | +| System.ReadOnlySpan System.IO.Enumeration.FileSystemEntry.get_OriginalRootDirectory() | [IsReadOnlyAttribute(...)] | +| System.ReadOnlySpan System.IO.Enumeration.FileSystemEntry.get_RootDirectory() | [CompilerGeneratedAttribute(...)] | +| System.ReadOnlySpan System.IO.Enumeration.FileSystemEntry.get_RootDirectory() | [IsReadOnlyAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.AsSpan(System.String) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.AsSpan(System.String,System.Int32) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.AsSpan(System.String,System.Int32,System.Int32) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.Trim(System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.Trim(System.ReadOnlySpan,System.Char) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.Trim(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimEnd(System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimEnd(System.ReadOnlySpan,System.Char) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimEnd(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimStart(System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimStart(System.ReadOnlySpan,System.Char) | [ExtensionAttribute(...)] | +| System.ReadOnlySpan System.MemoryExtensions.TrimStart(System.ReadOnlySpan,System.ReadOnlySpan) | [ExtensionAttribute(...)] | | System.ReadOnlySpan`1 | [IsByRefLikeAttribute(...)] | | System.ReadOnlySpan`1 | [IsReadOnlyAttribute(...)] | | System.ReadOnlySpan`1 | [NonVersionableAttribute(...)] | | System.ReadOnlySpan`1.Enumerator | [IsByRefLikeAttribute(...)] | +| System.Reflection.Assembly System.AssemblyLoadEventArgs.get_LoadedAssembly() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.Assembly System.Reflection.ManifestResourceInfo.get_ReferencedAssembly() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.Assembly System.ResolveEventArgs.get_RequestingAssembly() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.d__55.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Reflection.AssemblyAlgorithmIdAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.AssemblyCompanyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.AssemblyConfigurationAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -432,6 +1415,7 @@ attrNoArg | System.Reflection.AssemblyKeyNameAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.AssemblyMetadataAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.AssemblyMetadataAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Reflection.AssemblyName System.Security.SecurityException.get_FailedAssemblyInfo() | [CompilerGeneratedAttribute(...)] | | System.Reflection.AssemblyNameFlags | [FlagsAttribute(...)] | | System.Reflection.AssemblyNameFormatter | [ExtensionAttribute(...)] | | System.Reflection.AssemblyProductAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -458,10 +1442,16 @@ attrNoArg | System.Reflection.Emit.Label | [IsReadOnlyAttribute(...)] | | System.Reflection.Emit.OpCode | [IsReadOnlyAttribute(...)] | | System.Reflection.EventAttributes | [FlagsAttribute(...)] | +| System.Reflection.EventInfo System.Reflection.RuntimeReflectionExtensions.GetRuntimeEvent(System.Type,System.String) | [ExtensionAttribute(...)] | | System.Reflection.ExceptionHandlingClauseOptions | [FlagsAttribute(...)] | | System.Reflection.FieldAttributes | [FlagsAttribute(...)] | +| System.Reflection.FieldInfo System.Reflection.RuntimeReflectionExtensions.GetRuntimeField(System.Type,System.String) | [ExtensionAttribute(...)] | +| System.Reflection.FieldInfo[] System.Diagnostics.Tracing.ManifestBuilder.g__GetEnumFields\|18_0(System.Type) | [CompilerGeneratedAttribute(...)] | | System.Reflection.GenericParameterAttributes | [FlagsAttribute(...)] | | System.Reflection.INVOCATION_FLAGS | [FlagsAttribute(...)] | +| System.Reflection.INVOCATION_FLAGS System.Reflection.RuntimeConstructorInfo.g__LazyCreateInvocationFlags\|13_0() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.INVOCATION_FLAGS System.Reflection.RuntimeMethodInfo.g__LazyCreateInvocationFlags\|13_0() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.InterfaceMapping System.Reflection.RuntimeReflectionExtensions.GetRuntimeInterfaceMap(System.Reflection.TypeInfo,System.Type) | [ExtensionAttribute(...)] | | System.Reflection.IntrospectionExtensions | [ExtensionAttribute(...)] | | System.Reflection.ManifestResourceInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.ManifestResourceInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -475,8 +1465,16 @@ attrNoArg | System.Reflection.MetadataEnumResult.e__FixedBuffer | [UnsafeValueTypeAttribute(...)] | | System.Reflection.MetadataImport | [IsReadOnlyAttribute(...)] | | System.Reflection.MethodAttributes | [FlagsAttribute(...)] | +| System.Reflection.MethodInfo System.Reflection.RuntimeReflectionExtensions.GetMethodInfo(System.Delegate) | [ExtensionAttribute(...)] | +| System.Reflection.MethodInfo System.Reflection.RuntimeReflectionExtensions.GetRuntimeBaseDefinition(System.Reflection.MethodInfo) | [ExtensionAttribute(...)] | +| System.Reflection.MethodInfo System.Reflection.RuntimeReflectionExtensions.GetRuntimeMethod(System.Type,System.String,System.Type[]) | [ExtensionAttribute(...)] | +| System.Reflection.MethodInfo System.Reflection.TypeInfo.d__10.get_Current() | [DebuggerHiddenAttribute(...)] | +| System.Reflection.MethodInfo System.Security.SecurityException.get_Method() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.MethodInfo[] System.Diagnostics.StackTrace.g__GetDeclaredMethods\|28_0(System.Type) | [CompilerGeneratedAttribute(...)] | +| System.Reflection.MethodInfo[] System.Reflection.TypeInfo.g__GetDeclaredOnlyMethods\|10_0(System.Type) | [CompilerGeneratedAttribute(...)] | | System.Reflection.MethodSemanticsAttributes | [FlagsAttribute(...)] | | System.Reflection.Module.<>c | [CompilerGeneratedAttribute(...)] | +| System.Reflection.NullabilityInfo System.Reflection.NullabilityInfo.get_ElementType() | [CompilerGeneratedAttribute(...)] | | System.Reflection.NullabilityInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.NullabilityInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.NullabilityInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -484,6 +1482,9 @@ attrNoArg | System.Reflection.NullabilityInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.NullabilityInfoContext.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.NullabilityInfoContext.NotAnnotatedStatus | [FlagsAttribute(...)] | +| System.Reflection.NullabilityInfo[] System.Reflection.NullabilityInfo.get_GenericTypeArguments() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.NullabilityState System.Reflection.NullabilityInfo.get_ReadState() | [CompilerGeneratedAttribute(...)] | +| System.Reflection.NullabilityState System.Reflection.NullabilityInfo.get_WriteState() | [CompilerGeneratedAttribute(...)] | | System.Reflection.ObfuscateAssemblyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.ObfuscateAssemblyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.ObfuscationAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -495,14 +1496,20 @@ attrNoArg | System.Reflection.ParameterModifier | [IsReadOnlyAttribute(...)] | | System.Reflection.PortableExecutableKinds | [FlagsAttribute(...)] | | System.Reflection.PropertyAttributes | [FlagsAttribute(...)] | +| System.Reflection.PropertyInfo System.Reflection.RuntimeReflectionExtensions.GetRuntimeProperty(System.Type,System.String) | [ExtensionAttribute(...)] | | System.Reflection.ReflectionTypeLoadException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.ReflectionTypeLoadException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Reflection.ResourceAttributes | [FlagsAttribute(...)] | | System.Reflection.ResourceLocation | [FlagsAttribute(...)] | +| System.Reflection.ResourceLocation System.Reflection.ManifestResourceInfo.get_ResourceLocation() | [CompilerGeneratedAttribute(...)] | | System.Reflection.RuntimeAssembly._ModuleResolve | [CompilerGeneratedAttribute(...)] | +| System.Reflection.RuntimeMethodInfo System.Reflection.RuntimePropertyInfo.GetGetMethod(System.Boolean) | [PreserveBaseOverridesAttribute(...)] | +| System.Reflection.RuntimeMethodInfo System.Reflection.RuntimePropertyInfo.GetSetMethod(System.Boolean) | [PreserveBaseOverridesAttribute(...)] | | System.Reflection.RuntimeReflectionExtensions | [ExtensionAttribute(...)] | | System.Reflection.SignatureTypeExtensions | [ExtensionAttribute(...)] | | System.Reflection.TypeAttributes | [FlagsAttribute(...)] | +| System.Reflection.TypeInfo System.Reflection.IntrospectionExtensions.GetTypeInfo(System.Type) | [ExtensionAttribute(...)] | +| System.Reflection.TypeInfo System.Reflection.TypeInfo.d__22.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Reflection.TypeInfo.d__10 | [CompilerGeneratedAttribute(...)] | | System.Reflection.TypeInfo.d__22 | [CompilerGeneratedAttribute(...)] | | System.ResolveEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -516,6 +1523,7 @@ attrNoArg | System.Resources.ResourceReader.<>c__DisplayClass7_0`1 | [CompilerGeneratedAttribute(...)] | | System.Resources.ResourceReader.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Resources.SatelliteContractVersionAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Resources.UltimateResourceFallbackLocation System.Resources.NeutralResourcesLanguageAttribute.get_Location() | [CompilerGeneratedAttribute(...)] | | System.Runtime.AssemblyTargetedPatchBandAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.AccessedThroughPropertyAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.AsyncMethodBuilderAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -526,6 +1534,9 @@ attrNoArg | System.Runtime.CompilerServices.CompilationRelaxationsAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.ConditionalWeakTable`2.<>c | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.ConfiguredAsyncDisposable | [IsReadOnlyAttribute(...)] | +| System.Runtime.CompilerServices.ConfiguredAsyncDisposable System.Threading.Tasks.TaskAsyncEnumerableExtensions.ConfigureAwait(System.IAsyncDisposable,System.Boolean) | [ExtensionAttribute(...)] | +| System.Runtime.CompilerServices.ConfiguredCancelableAsyncEnumerable System.Threading.Tasks.TaskAsyncEnumerableExtensions.ConfigureAwait`1(System.Collections.Generic.IAsyncEnumerable,System.Boolean) | [ExtensionAttribute(...)] | +| System.Runtime.CompilerServices.ConfiguredCancelableAsyncEnumerable System.Threading.Tasks.TaskAsyncEnumerableExtensions.WithCancellation`1(System.Collections.Generic.IAsyncEnumerable,System.Threading.CancellationToken) | [ExtensionAttribute(...)] | | System.Runtime.CompilerServices.ConfiguredCancelableAsyncEnumerable`1 | [IsReadOnlyAttribute(...)] | | System.Runtime.CompilerServices.ConfiguredCancelableAsyncEnumerable`1.Enumerator | [IsReadOnlyAttribute(...)] | | System.Runtime.CompilerServices.ConfiguredTaskAwaitable | [IsReadOnlyAttribute(...)] | @@ -549,8 +1560,12 @@ attrNoArg | System.Runtime.CompilerServices.InterpolatedStringHandlerArgumentAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.IsUnmanagedAttribute | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.IsUnmanagedAttribute | [EmbeddedAttribute(...)] | +| System.Runtime.CompilerServices.LoadHint System.Runtime.CompilerServices.DefaultDependencyAttribute.get_LoadHint() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.CompilerServices.LoadHint System.Runtime.CompilerServices.DependencyAttribute.get_LoadHint() | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.MethodImplAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.MethodImplOptions | [FlagsAttribute(...)] | +| System.Runtime.CompilerServices.MethodImplOptions System.Runtime.CompilerServices.MethodImplAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.CompilerServices.MethodTable* System.Runtime.CompilerServices.RuntimeHelpers.GetMethodTable(System.Object) | [IntrinsicAttribute(...)] | | System.Runtime.CompilerServices.NativeIntegerAttribute | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.NativeIntegerAttribute | [EmbeddedAttribute(...)] | | System.Runtime.CompilerServices.NullableAttribute | [CompilerGeneratedAttribute(...)] | @@ -560,6 +1575,7 @@ attrNoArg | System.Runtime.CompilerServices.NullablePublicOnlyAttribute | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.NullablePublicOnlyAttribute | [EmbeddedAttribute(...)] | | System.Runtime.CompilerServices.ObjectHandleOnStack | [IsByRefLikeAttribute(...)] | +| System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.StateMachineBox | [NotNullAttribute(...)] | | System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.t_tlsCache | [ThreadStaticAttribute(...)] | | System.Runtime.CompilerServices.QCallAssembly | [IsByRefLikeAttribute(...)] | | System.Runtime.CompilerServices.QCallModule | [IsByRefLikeAttribute(...)] | @@ -570,6 +1586,9 @@ attrNoArg | System.Runtime.CompilerServices.StackCrawlMarkHandle | [IsByRefLikeAttribute(...)] | | System.Runtime.CompilerServices.StateMachineAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.StringHandleOnStack | [IsByRefLikeAttribute(...)] | +| System.Runtime.CompilerServices.StrongBox System.Console.g__EnsureInitialized\|38_0() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.CompilerServices.StrongBox System.Console.g__EnsureInitialized\|34_0() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.CompilerServices.StrongBox System.Console.g__EnsureInitialized\|36_0() | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.StrongBox`1.Value | [MaybeNullAttribute(...)] | | System.Runtime.CompilerServices.SwitchExpressionException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.CompilerServices.TaskAwaiter | [IsReadOnlyAttribute(...)] | @@ -583,6 +1602,8 @@ attrNoArg | System.Runtime.CompilerServices.YieldAwaitable | [IsReadOnlyAttribute(...)] | | System.Runtime.CompilerServices.YieldAwaitable.YieldAwaiter | [IsReadOnlyAttribute(...)] | | System.Runtime.CompilerServices.YieldAwaitable.YieldAwaiter.<>c | [CompilerGeneratedAttribute(...)] | +| System.Runtime.ConstrainedExecution.Cer System.Runtime.ConstrainedExecution.ReliabilityContractAttribute.get_Cer() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.ConstrainedExecution.Consistency System.Runtime.ConstrainedExecution.ReliabilityContractAttribute.get_ConsistencyGuarantee() | [CompilerGeneratedAttribute(...)] | | System.Runtime.ConstrainedExecution.ReliabilityContractAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.ConstrainedExecution.ReliabilityContractAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -593,11 +1614,15 @@ attrNoArg | System.Runtime.InteropServices.CLong | [IsReadOnlyAttribute(...)] | | System.Runtime.InteropServices.CULong | [IntrinsicAttribute(...)] | | System.Runtime.InteropServices.CULong | [IsReadOnlyAttribute(...)] | +| System.Runtime.InteropServices.CallingConvention System.Runtime.InteropServices.UnmanagedFunctionPointerAttribute.get_CallingConvention() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.InteropServices.CharSet System.Runtime.InteropServices.DefaultCharSetAttribute.get_CharSet() | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.ClassInterfaceAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Runtime.InteropServices.ClassInterfaceType System.Runtime.InteropServices.ClassInterfaceAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.CoClassAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.ComDefaultInterfaceAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.ComEventInterfaceAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.ComEventInterfaceAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Runtime.InteropServices.ComInterfaceType System.Runtime.InteropServices.InterfaceTypeAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.ComSourceInterfacesAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.ComTypes.FUNCFLAGS | [FlagsAttribute(...)] | | System.Runtime.InteropServices.ComTypes.IDLFLAG | [FlagsAttribute(...)] | @@ -618,17 +1643,50 @@ attrNoArg | System.Runtime.InteropServices.DispatchWrapper.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.DllImportAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.DllImportSearchPath | [FlagsAttribute(...)] | +| System.Runtime.InteropServices.DllImportSearchPath System.Runtime.InteropServices.DefaultDllImportSearchPathsAttribute.get_Paths() | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.ErrorWrapper.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.FieldOffsetAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.GuidAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.HandleRef | [IsReadOnlyAttribute(...)] | | System.Runtime.InteropServices.InterfaceTypeAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.LCIDConversionAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Runtime.InteropServices.LayoutKind System.Runtime.InteropServices.StructLayoutAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.Marshal.<>c | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.MarshalAsAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.MemoryMarshal.d__18`1 | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.NFloat | [IntrinsicAttribute(...)] | | System.Runtime.InteropServices.NFloat | [IsReadOnlyAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.get_Epsilon() | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.get_MaxValue() | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.get_MinValue() | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.get_NaN() | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.get_NegativeInfinity() | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.get_PositiveInfinity() | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Addition(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Decrement(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Division(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Explicit(System.Decimal) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Explicit(System.Double) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.Byte) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.Char) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.Int16) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.Int32) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.Int64) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.SByte) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.Single) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UInt16) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UInt32) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UInt64) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Increment(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Modulus(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Multiply(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Subtraction(System.Runtime.InteropServices.NFloat,System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_UnaryNegation(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_UnaryPlus(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Runtime.InteropServices.PosixSignal System.Runtime.InteropServices.PosixSignalContext.get_Signal() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.InteropServices.PosixSignal System.Runtime.InteropServices.PosixSignalRegistration.Token.get_Signal() | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.PosixSignalContext.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.PosixSignalContext.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.PosixSignalRegistration.Token.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -641,18 +1699,323 @@ attrNoArg | System.Runtime.InteropServices.TypeIdentifierAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.UnknownWrapper.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.UnmanagedFunctionPointerAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Runtime.InteropServices.UnmanagedType System.Runtime.InteropServices.MarshalAsAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | | System.Runtime.InteropServices.VariantWrapper.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Intrinsics.Arm.Crc32 | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Arm.Crc32.Arm64 | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Vector64 | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.WithElement`1(System.Runtime.Intrinsics.Vector64,System.Int32,!0) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.WithElement`1(System.Runtime.Intrinsics.Vector64,System.Int32,!0) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64`1.get_AllBitsSet() | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64`1.get_Zero() | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector128.GetLower`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector128.GetLower`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector128.GetUpper`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector128.GetUpper`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.As`2(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.As`2(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|12_0(System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|22_0(System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|29_0(System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsByte`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsByte`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|13_0(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|30_0(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsDouble`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsDouble`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Double) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|14_0(System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|23_0(System.Int16,System.Int16,System.Int16,System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|31_0(System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsInt16`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsInt16`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Int16,System.Int16,System.Int16,System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|15_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|24_0(System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|32_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsInt32`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsInt32`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|16_0(System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|33_0(System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsInt64`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsInt64`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Int64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|17_0(System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|25_0(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|34_0(System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsSByte`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsSByte`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|18_0(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|26_0(System.Single,System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|35_0(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsSingle`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsSingle`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|19_0(System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|27_0(System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|36_0(System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt16`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt16`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|20_0(System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|28_0(System.UInt32,System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|37_0(System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt32`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt32`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt32,System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|21_0(System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.g__SoftwareFallback\|38_0(System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt64`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt64`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt64) | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Vector64DebugView`1 | [IsReadOnlyAttribute(...)] | | System.Runtime.Intrinsics.Vector64`1 | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Vector64`1 | [IsReadOnlyAttribute(...)] | | System.Runtime.Intrinsics.Vector128 | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 | [IsReadOnlyAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector64.ToVector128Unsafe`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector64.ToVector128Unsafe`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector64.ToVector128`1(System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector64.ToVector128`1(System.Runtime.Intrinsics.Vector64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|73_0`1(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|75_0`1(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsVector128`1(System.Numerics.Vector) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsVector128`1(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.WithElement`1(System.Runtime.Intrinsics.Vector128,System.Int32,!0) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.WithElement`1(System.Runtime.Intrinsics.Vector128,System.Int32,!0) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.WithLower`1(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.WithUpper`1(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector64) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128`1.get_AllBitsSet() | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128`1.get_Zero() | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|68_0`1(System.Runtime.Intrinsics.Vector256) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector256.GetLower`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector256.GetLower`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector256.GetUpper`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.As`2(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.As`2(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|20_0(System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|30_0(System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|40_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|50_0(System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsByte`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsByte`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|21_0(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|31_0(System.Double,System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|41_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|51_0(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsDouble`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsDouble`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Double) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Double,System.Double) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.Double) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|22_0(System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|32_0(System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|42_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|52_0(System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsInt16`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsInt16`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|23_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|33_0(System.Int32,System.Int32,System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|43_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|53_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsInt32`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsInt32`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Int32,System.Int32,System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|24_0(System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|34_0(System.Int64,System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|44_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|54_0(System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsInt64`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsInt64`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Int64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Int64,System.Int64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.Int64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|25_0(System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|35_0(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|45_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|55_0(System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsSByte`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsSByte`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|26_0(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|36_0(System.Single,System.Single,System.Single,System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|46_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|56_0(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsSingle`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsSingle`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsVector128(System.Numerics.Vector2) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsVector128(System.Numerics.Vector3) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsVector128(System.Numerics.Vector4) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsVector128(System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Single,System.Single,System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|27_0(System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|37_0(System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|47_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|57_0(System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt16`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt16`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.String.g__ReadVector\|201_0(System.Char,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|28_0(System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|38_0(System.UInt32,System.UInt32,System.UInt32,System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|48_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|58_0(System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt32`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt32`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt32,System.UInt32,System.UInt32,System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|29_0(System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|39_0(System.UInt64,System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|49_0(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.g__SoftwareFallback\|59_0(System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt64`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt64`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt64,System.UInt64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.UInt64) | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Vector128DebugView`1 | [IsReadOnlyAttribute(...)] | | System.Runtime.Intrinsics.Vector128`1 | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Vector128`1 | [IsReadOnlyAttribute(...)] | | System.Runtime.Intrinsics.Vector256 | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 | [IsReadOnlyAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector128.ToVector256Unsafe`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector128.ToVector256Unsafe`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector128.ToVector256`1(System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector128.ToVector256`1(System.Runtime.Intrinsics.Vector128) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|67_0`1(System.Runtime.Intrinsics.Vector256,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|69_0`1(System.Runtime.Intrinsics.Vector256,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsVector256`1(System.Numerics.Vector) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsVector256`1(System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.WithElement`1(System.Runtime.Intrinsics.Vector256,System.Int32,!0) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.WithElement`1(System.Runtime.Intrinsics.Vector256,System.Int32,!0) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.WithLower`1(System.Runtime.Intrinsics.Vector256,System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.WithUpper`1(System.Runtime.Intrinsics.Vector256,System.Runtime.Intrinsics.Vector128) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256`1.get_AllBitsSet() | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256`1.get_Zero() | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.As`2(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.As`2(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|14_0(System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|24_0(System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|34_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|44_0(System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsByte`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsByte`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.Byte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|15_0(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|25_0(System.Double,System.Double,System.Double,System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|35_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|45_0(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsDouble`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsDouble`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Double) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Double,System.Double,System.Double,System.Double) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.Double) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|16_0(System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|26_0(System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|36_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|46_0(System.Int16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsInt16`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsInt16`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16,System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.Int16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|17_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|27_0(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|37_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|47_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsInt32`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsInt32`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.Int32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|18_0(System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|28_0(System.Int64,System.Int64,System.Int64,System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|38_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|48_0(System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsInt64`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsInt64`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Int64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Int64,System.Int64,System.Int64,System.Int64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.Int64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|19_0(System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|29_0(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|39_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|49_0(System.SByte) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsSByte`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsSByte`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.SByte) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|20_0(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|30_0(System.Single,System.Single,System.Single,System.Single,System.Single,System.Single,System.Single,System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|40_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|50_0(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsSingle`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsSingle`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Single,System.Single,System.Single,System.Single,System.Single,System.Single,System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.Single) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|21_0(System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|31_0(System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|41_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|51_0(System.UInt16) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt16`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt16`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.UInt16) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|22_0(System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|32_0(System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|42_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|52_0(System.UInt32) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt32`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt32`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.UInt32) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|23_0(System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|33_0(System.UInt64,System.UInt64,System.UInt64,System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|43_0(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.g__SoftwareFallback\|53_0(System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt64`1(System.Runtime.Intrinsics.Vector256) | [ExtensionAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt64`1(System.Runtime.Intrinsics.Vector256) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt64,System.UInt64,System.UInt64,System.UInt64) | [IntrinsicAttribute(...)] | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.UInt64) | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Vector256DebugView`1 | [IsReadOnlyAttribute(...)] | | System.Runtime.Intrinsics.Vector256`1 | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.Vector256`1 | [IsReadOnlyAttribute(...)] | @@ -691,6 +2054,7 @@ attrNoArg | System.Runtime.Intrinsics.X86.X86Base | [IntrinsicAttribute(...)] | | System.Runtime.Intrinsics.X86.X86Base.X64 | [IntrinsicAttribute(...)] | | System.Runtime.Loader.AssemblyDependencyResolver.<>c__DisplayClass6_0 | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Loader.AssemblyLoadContext System.Runtime.Loader.AssemblyLoadContext.d__85.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Runtime.Loader.AssemblyLoadContext.d__85 | [CompilerGeneratedAttribute(...)] | | System.Runtime.Loader.AssemblyLoadContext.d__55 | [CompilerGeneratedAttribute(...)] | | System.Runtime.Loader.AssemblyLoadContext.AssemblyLoad | [CompilerGeneratedAttribute(...)] | @@ -700,6 +2064,7 @@ attrNoArg | System.Runtime.Loader.AssemblyLoadContext._resolving | [CompilerGeneratedAttribute(...)] | | System.Runtime.Loader.AssemblyLoadContext._resolvingUnmanagedDll | [CompilerGeneratedAttribute(...)] | | System.Runtime.Loader.AssemblyLoadContext._unloading | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Loader.LibraryNameVariation System.Runtime.Loader.LibraryNameVariation.d__5.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Runtime.Loader.LibraryNameVariation.d__5 | [CompilerGeneratedAttribute(...)] | | System.Runtime.Serialization.DeserializationToken | [IsReadOnlyAttribute(...)] | | System.Runtime.Serialization.DeserializationTracker.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -710,10 +2075,12 @@ attrNoArg | System.Runtime.Serialization.SerializationInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Serialization.SerializationInfo.t_deserializationTracker | [ThreadStaticAttribute(...)] | | System.Runtime.Serialization.StreamingContext | [IsReadOnlyAttribute(...)] | +| System.Runtime.Serialization.StreamingContext System.Runtime.Serialization.SafeSerializationEventArgs.get_StreamingContext() | [CompilerGeneratedAttribute(...)] | | System.Runtime.Serialization.StreamingContextStates | [FlagsAttribute(...)] | | System.Runtime.TargetedPatchingOptOutAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.ComponentGuaranteesAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.ComponentGuaranteesOptions | [FlagsAttribute(...)] | +| System.Runtime.Versioning.ComponentGuaranteesOptions System.Runtime.Versioning.ComponentGuaranteesAttribute.get_Guarantees() | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.OSPlatformAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.RequiresPreviewFeaturesAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.RequiresPreviewFeaturesAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -721,13 +2088,24 @@ attrNoArg | System.Runtime.Versioning.ResourceConsumptionAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.ResourceExposureAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.ResourceScope | [FlagsAttribute(...)] | +| System.Runtime.Versioning.ResourceScope System.Runtime.Versioning.ResourceConsumptionAttribute.get_ConsumptionScope() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Versioning.ResourceScope System.Runtime.Versioning.ResourceConsumptionAttribute.get_ResourceScope() | [CompilerGeneratedAttribute(...)] | +| System.Runtime.Versioning.ResourceScope System.Runtime.Versioning.ResourceExposureAttribute.get_ResourceExposureLevel() | [CompilerGeneratedAttribute(...)] | | System.Runtime.Versioning.SxSRequirements | [FlagsAttribute(...)] | | System.RuntimeArgumentHandle | [IsByRefLikeAttribute(...)] | | System.RuntimeFieldHandle | [NonVersionableAttribute(...)] | | System.RuntimeMethodHandle | [NonVersionableAttribute(...)] | +| System.RuntimeType System.Runtime.InteropServices.DynamicInterfaceCastableHelpers.GetInterfaceImplementation(System.Runtime.InteropServices.IDynamicInterfaceCastable,System.RuntimeType) | [StackTraceHiddenAttribute(...)] | | System.RuntimeType.RuntimeTypeCache.Filter | [IsReadOnlyAttribute(...)] | | System.RuntimeTypeHandle | [NonVersionableAttribute(...)] | +| System.SByte System.Math.Max(System.SByte,System.SByte) | [NonVersionableAttribute(...)] | +| System.SByte System.Math.Min(System.SByte,System.SByte) | [NonVersionableAttribute(...)] | +| System.SByte System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.SByte System.Threading.Volatile.Read(System.SByte) | [IntrinsicAttribute(...)] | +| System.SByte System.Threading.Volatile.Read(System.SByte) | [NonVersionableAttribute(...)] | | System.Security.AllowPartiallyTrustedCallersAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Security.PartialTrustVisibilityLevel System.Security.AllowPartiallyTrustedCallersAttribute.get_PartialTrustVisibilityLevel() | [CompilerGeneratedAttribute(...)] | +| System.Security.Permissions.SecurityAction System.Security.Permissions.SecurityAttribute.get_Action() | [CompilerGeneratedAttribute(...)] | | System.Security.Permissions.SecurityAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.Permissions.SecurityAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.Permissions.SecurityPermissionAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -746,7 +2124,9 @@ attrNoArg | System.Security.Permissions.SecurityPermissionAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.Permissions.SecurityPermissionAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.Permissions.SecurityPermissionFlag | [FlagsAttribute(...)] | +| System.Security.Permissions.SecurityPermissionFlag System.Security.Permissions.SecurityPermissionAttribute.get_Flags() | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityCriticalAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Security.SecurityCriticalScope System.Security.SecurityCriticalAttribute.get_Scope() | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityElement.<>c | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityException.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -758,18 +2138,228 @@ attrNoArg | System.Security.SecurityException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityException.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityException.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Security.SecurityRuleSet System.Security.SecurityRulesAttribute.get_RuleSet() | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityRulesAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Security.SecurityRulesAttribute.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Signature System.Reflection.RuntimeConstructorInfo.g__LazyCreateSignature\|19_0() | [CompilerGeneratedAttribute(...)] | +| System.Signature System.Reflection.RuntimeMethodInfo.g__LazyCreateSignature\|24_0() | [CompilerGeneratedAttribute(...)] | +| System.Single System.Diagnostics.Tracing.CounterPayload.get_IntervalSec() | [CompilerGeneratedAttribute(...)] | +| System.Single System.Diagnostics.Tracing.IncrementingCounterPayload.get_IntervalSec() | [CompilerGeneratedAttribute(...)] | +| System.Single System.Math.Abs(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.g__SoftwareFallback\|40_0(System.Single,System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Single System.MathF.Acos(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Acosh(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Asin(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Asinh(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Atan2(System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Atan(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Atanh(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Cbrt(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Ceiling(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Cos(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Cosh(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Exp(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Floor(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.FusedMultiplyAdd(System.Single,System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Log2(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Log10(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Log(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Pow(System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Round(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Sin(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Sinh(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Sqrt(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Tan(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.MathF.Tanh(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.Numerics.Matrix3x2.GetDeterminant() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Matrix4x4.GetDeterminant() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Quaternion.Length() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Quaternion.LengthSquared() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Vector2.Dot(System.Numerics.Vector2,System.Numerics.Vector2) | [IntrinsicAttribute(...)] | +| System.Single System.Numerics.Vector2.Length() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Vector2.LengthSquared() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Vector3.Dot(System.Numerics.Vector3,System.Numerics.Vector3) | [IntrinsicAttribute(...)] | +| System.Single System.Numerics.Vector3.Length() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Vector3.LengthSquared() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Vector4.Dot(System.Numerics.Vector4,System.Numerics.Vector4) | [IntrinsicAttribute(...)] | +| System.Single System.Numerics.Vector4.Length() | [IsReadOnlyAttribute(...)] | +| System.Single System.Numerics.Vector4.LengthSquared() | [IsReadOnlyAttribute(...)] | +| System.Single System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.Single System.Threading.Volatile.Read(System.Single) | [IntrinsicAttribute(...)] | +| System.Single System.Threading.Volatile.Read(System.Single) | [NonVersionableAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(!0[]) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Index) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Int32) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Int32,System.Int32) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Range) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Index) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Int32) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Int32,System.Int32) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Range) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.TrimEnd`1(System.Span,!0) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.TrimEnd`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.TrimStart`1(System.Span,!0) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.TrimStart`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.Trim`1(System.Span,!0) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.Trim`1(System.Span,System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.Trim(System.Span) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.TrimEnd(System.Span) | [ExtensionAttribute(...)] | +| System.Span System.MemoryExtensions.TrimStart(System.Span) | [ExtensionAttribute(...)] | +| System.Span | [IsReadOnlyAttribute(...)] | | System.SpanHelpers | [ExtensionAttribute(...)] | | System.SpanHelpers.ComparerComparable`2 | [IsReadOnlyAttribute(...)] | | System.Span`1 | [IsByRefLikeAttribute(...)] | | System.Span`1 | [IsReadOnlyAttribute(...)] | | System.Span`1 | [NonVersionableAttribute(...)] | | System.Span`1.Enumerator | [IsByRefLikeAttribute(...)] | +| System.String System.ApplicationId.get_Culture() | [CompilerGeneratedAttribute(...)] | +| System.String System.ApplicationId.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.ApplicationId.get_ProcessorArchitecture() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.get_AssemblyName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.get_Condition() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.get_MemberSignature() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.get_TypeName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.ExcludeFromCodeCoverageAttribute.get_Justification() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.NotNullIfNotNullAttribute.get_ParameterName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.RequiresAssemblyFilesAttribute.get_Message() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.RequiresAssemblyFilesAttribute.get_Url() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.RequiresUnreferencedCodeAttribute.get_Message() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.RequiresUnreferencedCodeAttribute.get_Url() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_Category() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_CheckId() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_Justification() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_MessageId() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_Scope() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_Target() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_Category() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_CheckId() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_Justification() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_MessageId() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_Scope() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_Target() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.ConditionalAttribute.get_ConditionString() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerDisplayAttribute.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerDisplayAttribute.get_TargetTypeName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerDisplayAttribute.get_Type() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerDisplayAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerTypeProxyAttribute.get_ProxyTypeName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerTypeProxyAttribute.get_TargetTypeName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerVisualizerAttribute.get_Description() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerVisualizerAttribute.get_TargetTypeName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerVisualizerAttribute.get_VisualizerObjectSourceTypeName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.DebuggerVisualizerAttribute.get_VisualizerTypeName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.CounterPayload.get_CounterType() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.CounterPayload.get_DisplayName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.CounterPayload.get_DisplayUnits() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.CounterPayload.get_Metadata() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.CounterPayload.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.CounterPayload.get_Series() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.DiagnosticCounter.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.EventAttribute.get_Message() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.EventDataAttribute.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.EventFieldAttribute.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.EventSourceAttribute.get_Guid() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.EventSourceAttribute.get_LocalizationResources() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.EventSourceAttribute.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.IncrementingCounterPayload.get_CounterType() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.IncrementingCounterPayload.get_DisplayName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.IncrementingCounterPayload.get_DisplayRateTimeScale() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.IncrementingCounterPayload.get_DisplayUnits() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.IncrementingCounterPayload.get_Metadata() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.IncrementingCounterPayload.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Diagnostics.Tracing.IncrementingCounterPayload.get_Series() | [CompilerGeneratedAttribute(...)] | +| System.String System.IO.FileLoadException.get_FileName() | [CompilerGeneratedAttribute(...)] | +| System.String System.IO.FileLoadException.get_FusionLog() | [CompilerGeneratedAttribute(...)] | +| System.String System.IO.FileNotFoundException.get_FileName() | [CompilerGeneratedAttribute(...)] | +| System.String System.IO.FileNotFoundException.get_FusionLog() | [CompilerGeneratedAttribute(...)] | +| System.String System.Number.g__FormatInt32Slow\|40_0(System.Int32,System.Int32,System.String,System.IFormatProvider) | [CompilerGeneratedAttribute(...)] | +| System.String System.Number.g__FormatInt64Slow\|44_0(System.Int64,System.String,System.IFormatProvider) | [CompilerGeneratedAttribute(...)] | +| System.String System.Number.g__FormatUInt32Slow\|42_0(System.UInt32,System.String,System.IFormatProvider) | [CompilerGeneratedAttribute(...)] | +| System.String System.Number.g__FormatUInt64Slow\|46_0(System.UInt64,System.String,System.IFormatProvider) | [CompilerGeneratedAttribute(...)] | +| System.String System.Numerics.Matrix3x2.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Matrix4x4.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Plane.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Quaternion.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector2.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector2.ToString(System.String) | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector2.ToString(System.String,System.IFormatProvider) | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector3.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector3.ToString(System.String) | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector3.ToString(System.String,System.IFormatProvider) | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector4.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector4.ToString(System.String) | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector4.ToString(System.String,System.IFormatProvider) | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector`1.ToString() | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector`1.ToString(System.String) | [IsReadOnlyAttribute(...)] | +| System.String System.Numerics.Vector`1.ToString(System.String,System.IFormatProvider) | [IsReadOnlyAttribute(...)] | +| System.String System.ObsoleteAttribute.get_DiagnosticId() | [CompilerGeneratedAttribute(...)] | +| System.String System.ObsoleteAttribute.get_Message() | [CompilerGeneratedAttribute(...)] | +| System.String System.ObsoleteAttribute.get_UrlFormat() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyCompanyAttribute.get_Company() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyConfigurationAttribute.get_Configuration() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyCopyrightAttribute.get_Copyright() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyCultureAttribute.get_Culture() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyDefaultAliasAttribute.get_DefaultAlias() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyDescriptionAttribute.get_Description() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyFileVersionAttribute.get_Version() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyInformationalVersionAttribute.get_InformationalVersion() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyKeyFileAttribute.get_KeyFile() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyKeyNameAttribute.get_KeyName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyMetadataAttribute.get_Key() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyMetadataAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyProductAttribute.get_Product() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblySignatureKeyAttribute.get_Countersignature() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblySignatureKeyAttribute.get_PublicKey() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyTitleAttribute.get_Title() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyTrademarkAttribute.get_Trademark() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.AssemblyVersionAttribute.get_Version() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.DefaultMemberAttribute.get_MemberName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.ManifestResourceInfo.get_FileName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Reflection.ObfuscationAttribute.get_Feature() | [CompilerGeneratedAttribute(...)] | +| System.String System.ResolveEventArgs.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.String System.Resources.NeutralResourcesLanguageAttribute.get_CultureName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Resources.SatelliteContractVersionAttribute.get_Version() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.AssemblyTargetedPatchBandAttribute.get_TargetedPatchBand() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.CompilerServices.AccessedThroughPropertyAttribute.get_PropertyName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.CompilerServices.CallerArgumentExpressionAttribute.get_ParameterName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.CompilerServices.ContractHelper.RaiseContractFailedEvent(System.Diagnostics.Contracts.ContractFailureKind,System.String,System.String,System.Exception) | [DebuggerNonUserCodeAttribute(...)] | +| System.String System.Runtime.CompilerServices.DependencyAttribute.get_DependentAssembly() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.CompilerServices.InternalsVisibleToAttribute.get_AssemblyName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.CompilerServices.ReferenceAssemblyAttribute.get_Description() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.CompilerServices.TypeForwardedFromAttribute.get_AssemblyFullName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.InteropServices.BStrWrapper.get_WrappedObject() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.InteropServices.ComSourceInterfacesAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.InteropServices.DllImportAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.InteropServices.GuidAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.InteropServices.ProgIdAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.InteropServices.TypeIdentifierAttribute.get_Identifier() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.InteropServices.TypeIdentifierAttribute.get_Scope() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.TargetedPatchingOptOutAttribute.get_Reason() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.Versioning.OSPlatformAttribute.get_PlatformName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.Versioning.RequiresPreviewFeaturesAttribute.get_Message() | [CompilerGeneratedAttribute(...)] | +| System.String System.Runtime.Versioning.RequiresPreviewFeaturesAttribute.get_Url() | [CompilerGeneratedAttribute(...)] | +| System.String System.Security.SecurityException.get_GrantedSet() | [CompilerGeneratedAttribute(...)] | +| System.String System.Security.SecurityException.get_PermissionState() | [CompilerGeneratedAttribute(...)] | +| System.String System.Security.SecurityException.get_RefusedSet() | [CompilerGeneratedAttribute(...)] | +| System.String System.Security.SecurityException.get_Url() | [CompilerGeneratedAttribute(...)] | +| System.String System.StringNormalizationExtensions.Normalize(System.String) | [ExtensionAttribute(...)] | +| System.String System.StringNormalizationExtensions.Normalize(System.String,System.Text.NormalizationForm) | [ExtensionAttribute(...)] | +| System.String System.Text.CodePageDataItem.get_BodyName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Text.CodePageDataItem.get_DisplayName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Text.CodePageDataItem.get_HeaderName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Text.CodePageDataItem.get_WebName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Text.EncodingInfo.get_DisplayName() | [CompilerGeneratedAttribute(...)] | +| System.String System.Text.EncodingInfo.get_Name() | [CompilerGeneratedAttribute(...)] | +| System.StringComparer System.Globalization.GlobalizationExtensions.GetStringComparer(System.Globalization.CompareInfo,System.Globalization.CompareOptions) | [ExtensionAttribute(...)] | | System.StringNormalizationExtensions | [ExtensionAttribute(...)] | | System.StringSplitOptions | [FlagsAttribute(...)] | +| System.String[] System.Diagnostics.CodeAnalysis.MemberNotNullAttribute.get_Members() | [CompilerGeneratedAttribute(...)] | +| System.String[] System.Diagnostics.CodeAnalysis.MemberNotNullWhenAttribute.get_Members() | [CompilerGeneratedAttribute(...)] | +| System.String[] System.Runtime.CompilerServices.InterpolatedStringHandlerArgumentAttribute.get_Arguments() | [CompilerGeneratedAttribute(...)] | | System.StubHelpers.StubHelpers.s_pendingExceptionObject | [ThreadStaticAttribute(...)] | | System.TermInfo.ParameterizedStrings.FormatParam | [IsReadOnlyAttribute(...)] | +| System.TermInfo.ParameterizedStrings.FormatParam[] | [ParamArrayAttribute(...)] | | System.TermInfo.ParameterizedStrings.t_cachedOneElementArgsArray | [ThreadStaticAttribute(...)] | | System.TermInfo.ParameterizedStrings.t_cachedStack | [ThreadStaticAttribute(...)] | | System.TermInfo.ParameterizedStrings.t_cachedTwoElementArgsArray | [ThreadStaticAttribute(...)] | @@ -779,26 +2369,36 @@ attrNoArg | System.Text.CodePageDataItem.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Text.CodePageDataItem.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Text.CodePageDataItem.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Text.Encoding System.Text.EncodingExtensions.RemovePreamble(System.Text.Encoding) | [ExtensionAttribute(...)] | | System.Text.EncodingExtensions | [ExtensionAttribute(...)] | | System.Text.EncodingInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Text.EncodingInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Text.EncodingInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Text.EncodingInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Text.EncodingProvider System.Text.EncodingInfo.get_Provider() | [CompilerGeneratedAttribute(...)] | | System.Text.Latin1Encoding.<>c | [CompilerGeneratedAttribute(...)] | | System.Text.Rune | [IsReadOnlyAttribute(...)] | | System.Text.SpanLineEnumerator | [IsByRefLikeAttribute(...)] | +| System.Text.SpanLineEnumerator System.MemoryExtensions.EnumerateLines(System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Text.SpanLineEnumerator System.MemoryExtensions.EnumerateLines(System.Span) | [ExtensionAttribute(...)] | | System.Text.SpanRuneEnumerator | [IsByRefLikeAttribute(...)] | +| System.Text.SpanRuneEnumerator System.MemoryExtensions.EnumerateRunes(System.ReadOnlySpan) | [ExtensionAttribute(...)] | +| System.Text.SpanRuneEnumerator System.MemoryExtensions.EnumerateRunes(System.Span) | [ExtensionAttribute(...)] | +| System.Text.StringBuilder | [NotNullAttribute(...)] | | System.Text.StringBuilder.AppendInterpolatedStringHandler | [InterpolatedStringHandlerAttribute(...)] | | System.Text.StringBuilderCache.t_cachedInstance | [ThreadStaticAttribute(...)] | | System.Text.TranscodingStream.<g__DisposeAsyncCore\|30_0>d | [CompilerGeneratedAttribute(...)] | | System.Text.TranscodingStream.<g__ReadAsyncCore\|41_0>d | [CompilerGeneratedAttribute(...)] | | System.Text.TranscodingStream.<g__WriteAsyncCore\|50_0>d | [CompilerGeneratedAttribute(...)] | | System.Text.TrimType | [FlagsAttribute(...)] | +| System.Text.Unicode.GraphemeClusterBreakType System.Text.Unicode.TextSegmentationUtility.Processor`1.get_CurrentType() | [CompilerGeneratedAttribute(...)] | +| System.Text.Unicode.GraphemeClusterBreakType System.Text.Unicode.TextSegmentationUtility.Processor`1.get_CurrentType() | [IsReadOnlyAttribute(...)] | | System.Text.Unicode.TextSegmentationUtility.Processor`1 | [IsByRefLikeAttribute(...)] | | System.Text.Unicode.TextSegmentationUtility.Processor`1.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Text.Unicode.TextSegmentationUtility.Processor`1.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Text.ValueStringBuilder | [IsByRefLikeAttribute(...)] | | System.Text.ValueUtf8Converter | [IsByRefLikeAttribute(...)] | +| System.Threading.AsyncLocal System.Runtime.Serialization.SerializationInfo.get_AsyncDeserializationInProgress() | [CompilerGeneratedAttribute(...)] | | System.Threading.AsyncLocalValueChangedArgs`1 | [IsReadOnlyAttribute(...)] | | System.Threading.AsyncLocalValueChangedArgs`1.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.AsyncLocalValueChangedArgs`1.k__BackingField | [CompilerGeneratedAttribute(...)] | @@ -811,10 +2411,16 @@ attrNoArg | System.Threading.CancellationTokenSource.CallbackNode.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.CancellationTokenSource.LinkedNCancellationTokenSource.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.CancellationTokenSource.Registrations.<>c | [CompilerGeneratedAttribute(...)] | +| System.Threading.CancellationToken[] | [ParamArrayAttribute(...)] | +| System.Threading.EventWaitHandle | [NotNullAttribute(...)] | +| System.Threading.IAsyncLocalValueMap System.Threading.AsyncLocalValueMap.get_Empty() | [CompilerGeneratedAttribute(...)] | | System.Threading.PeriodicTimer.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.PeriodicTimer.State.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.PortableThreadPool.HillClimbing.Complex.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.PortableThreadPool.HillClimbing.Complex.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Threading.PortableThreadPool.WaitThread System.Threading.PortableThreadPool.WaitThreadNode.get_Thread() | [CompilerGeneratedAttribute(...)] | +| System.Threading.PortableThreadPool.WaitThread System.Threading.RegisteredWaitHandle.get_WaitThread() | [CompilerGeneratedAttribute(...)] | +| System.Threading.PortableThreadPool.WaitThreadNode System.Threading.PortableThreadPool.WaitThreadNode.get_Next() | [CompilerGeneratedAttribute(...)] | | System.Threading.PortableThreadPool.WaitThreadNode.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.PortableThreadPool.WaitThreadNode.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.PortableThreadPool.WorkerThread.<>c | [CompilerGeneratedAttribute(...)] | @@ -836,6 +2442,7 @@ attrNoArg | System.Threading.SynchronizationContext.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.AwaitTaskContinuation.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ConcurrentExclusiveSchedulerPair.<>c | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.ConcurrentExclusiveSchedulerPair.CompletionState System.Threading.Tasks.ConcurrentExclusiveSchedulerPair.g__InitializeCompletionState\|23_0() | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ConcurrentExclusiveSchedulerPair.ConcurrentExclusiveTaskScheduler.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ConcurrentExclusiveSchedulerPair.ProcessingMode | [FlagsAttribute(...)] | | System.Threading.Tasks.GenericDelegateCache`2.<>c | [CompilerGeneratedAttribute(...)] | @@ -847,16 +2454,29 @@ attrNoArg | System.Threading.Tasks.SynchronizationContextAwaitTaskContinuation.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.SynchronizationContextAwaitTaskContinuation.<>c__DisplayClass6_0 | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.SynchronizationContextTaskScheduler.<>c | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task System.IO.File.g__Core\|72_0(System.String,System.Byte[],System.Threading.CancellationToken) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task System.IO.Stream.g__Core\|29_0(System.IO.Stream,System.IO.Stream,System.Int32,System.Threading.CancellationToken) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task System.IO.StreamWriter.g__Core\|76_0(System.Boolean,System.Boolean,System.Threading.CancellationToken) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task System.IO.TextWriter.g__WriteAsyncCore\|60_0(System.Text.StringBuilder,System.Threading.CancellationToken) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task System.IO.TextWriter.g__WriteLineAsyncCore\|66_0(System.Text.StringBuilder,System.Threading.CancellationToken) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task System.Threading.Tasks.TaskExtensions.Unwrap(System.Threading.Tasks.Task) | [ExtensionAttribute(...)] | +| System.Threading.Tasks.Task System.Threading.Tasks.ThreadPoolTaskScheduler.d__6.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Threading.Tasks.Task.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.Task.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.Task.CancellationPromise`1.<>c | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task.ContingentProperties System.Threading.Tasks.Task.g__InitializeContingentProperties\|81_0() | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.Task.DelayPromiseWithCancellation.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.Task.TaskStateFlags | [FlagsAttribute(...)] | | System.Threading.Tasks.Task.t_currentTask | [ThreadStaticAttribute(...)] | +| System.Threading.Tasks.Task | [NotNullAttribute(...)] | +| System.Threading.Tasks.Task System.Threading.Tasks.TaskExtensions.Unwrap`1(System.Threading.Tasks.Task>) | [ExtensionAttribute(...)] | +| System.Threading.Tasks.Task[] | [ParamArrayAttribute(...)] | +| System.Threading.Tasks.Task System.IO.Strategies.BufferedFileStreamStrategy.g__LastSyncCompletedReadTask\|36_0(System.Int32) | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.TaskAsyncEnumerableExtensions | [ExtensionAttribute(...)] | | System.Threading.Tasks.TaskContinuationOptions | [FlagsAttribute(...)] | | System.Threading.Tasks.TaskCreationOptions | [FlagsAttribute(...)] | | System.Threading.Tasks.TaskExtensions | [ExtensionAttribute(...)] | +| System.Threading.Tasks.TaskFactory System.Threading.Tasks.Task.get_Factory() | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.TaskFactory`1.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.TaskFactory`1.<>c__DisplayClass32_0 | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.TaskFactory`1.<>c__DisplayClass35_0 | [CompilerGeneratedAttribute(...)] | @@ -869,18 +2489,27 @@ attrNoArg | System.Threading.Tasks.TaskSchedulerAwaitTaskContinuation.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.TaskToApm.TaskAsyncResult.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.TaskToApm.TaskAsyncResult.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.Task[] | [ParamArrayAttribute(...)] | | System.Threading.Tasks.Task`1.TaskWhenAnyCast.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ThreadPoolTaskScheduler.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ThreadPoolTaskScheduler.d__6 | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.UnwrapPromise`1.<>c | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ValueTask | [IsReadOnlyAttribute(...)] | +| System.Threading.Tasks.ValueTask System.Text.TranscodingStream.g__DisposeAsyncCore\|30_0(System.ArraySegment) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.ValueTask System.Text.TranscodingStream.g__WriteAsyncCore\|50_0(System.ReadOnlyMemory,System.Threading.CancellationToken) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.ValueTask System.Threading.CancellationTokenRegistration.g__WaitForCallbackIfNecessaryAsync\|4_0(System.Int64,System.Threading.CancellationTokenSource.CallbackNode) | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ValueTask.ValueTaskSourceAsTask.<>c | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.ValueTask | [IsReadOnlyAttribute(...)] | +| System.Threading.Tasks.ValueTask System.IO.Stream.g__FinishReadAsync\|44_0(System.Threading.Tasks.Task,System.Byte[],System.Memory) | [CompilerGeneratedAttribute(...)] | +| System.Threading.Tasks.ValueTask System.Text.TranscodingStream.g__ReadAsyncCore\|41_0(System.Memory,System.Threading.CancellationToken) | [CompilerGeneratedAttribute(...)] | | System.Threading.Tasks.ValueTask`1 | [IsReadOnlyAttribute(...)] | | System.Threading.Tasks.ValueTask`1.ValueTaskSourceAsTask.<>c | [CompilerGeneratedAttribute(...)] | +| System.Threading.Thread System.Threading.Thread.get_CurrentThread() | [IntrinsicAttribute(...)] | | System.Threading.Thread.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.Thread.t_currentThread | [ThreadStaticAttribute(...)] | | System.Threading.ThreadHandle | [IsReadOnlyAttribute(...)] | | System.Threading.ThreadInt64PersistentCounter.t_nodeFinalizationHelpers | [ThreadStaticAttribute(...)] | +| System.Threading.ThreadLocal System.LocalDataStoreSlot.get_Data() | [CompilerGeneratedAttribute(...)] | | System.Threading.ThreadLocal`1.ts_finalizationHelper | [ThreadStaticAttribute(...)] | | System.Threading.ThreadLocal`1.ts_slotArray | [ThreadStaticAttribute(...)] | | System.Threading.ThreadPool.<>c | [CompilerGeneratedAttribute(...)] | @@ -893,67 +2522,1404 @@ attrNoArg | System.Threading.TimerQueue.k__BackingField | [CompilerGeneratedAttribute(...)] | | System.Threading.TimerQueue.d__16 | [CompilerGeneratedAttribute(...)] | | System.Threading.TimerQueue.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.Threading.TimerQueueTimer System.Threading.TimerQueue.d__16.get_Current() | [DebuggerHiddenAttribute(...)] | | System.Threading.TimerQueueTimer.<>c | [CompilerGeneratedAttribute(...)] | +| System.Threading.TimerQueue[] System.Threading.TimerQueue.get_Instances() | [CompilerGeneratedAttribute(...)] | | System.Threading.WaitHandle.t_safeWaitHandlesForRent | [ThreadStaticAttribute(...)] | | System.Threading.WaitHandleExtensions | [ExtensionAttribute(...)] | +| System.Threading._ThreadPoolWaitOrTimerCallback System.Threading.RegisteredWaitHandle.get_Callback() | [CompilerGeneratedAttribute(...)] | | System.ThrowHelper | [StackTraceHiddenAttribute(...)] | | System.TimeOnly | [IsReadOnlyAttribute(...)] | | System.TimeOnly.<>c | [CompilerGeneratedAttribute(...)] | | System.TimeSpan | [IsReadOnlyAttribute(...)] | +| System.TimeSpan System.Diagnostics.Tracing.IncrementingEventCounter.get_DisplayRateTimeScale() | [CompilerGeneratedAttribute(...)] | +| System.TimeSpan System.Diagnostics.Tracing.IncrementingPollingCounter.get_DisplayRateTimeScale() | [CompilerGeneratedAttribute(...)] | | System.TimeZoneInfo.<>c | [CompilerGeneratedAttribute(...)] | | System.TimeZoneInfo.<>c__DisplayClass171_0 | [CompilerGeneratedAttribute(...)] | | System.TimeZoneInfo.k__BackingField | [CompilerGeneratedAttribute(...)] | +| System.TimeZoneInfo.AdjustmentRule | [NotNullAttribute(...)] | | System.TimeZoneInfo.TransitionTime | [IsReadOnlyAttribute(...)] | | System.TimeZoneInfoOptions | [FlagsAttribute(...)] | +| System.Tuple> System.TupleExtensions.ToTuple`10(System.ValueTuple>) | [ExtensionAttribute(...)] | +| System.Tuple> System.TupleExtensions.ToTuple`9(System.ValueTuple>) | [ExtensionAttribute(...)] | +| System.Tuple> System.TupleExtensions.ToTuple`8(System.ValueTuple>) | [ExtensionAttribute(...)] | +| System.Tuple> System.TupleExtensions.ToTuple`11(System.ValueTuple>) | [ExtensionAttribute(...)] | +| System.Tuple> System.TupleExtensions.ToTuple`12(System.ValueTuple>) | [ExtensionAttribute(...)] | +| System.Tuple> System.TupleExtensions.ToTuple`13(System.ValueTuple>) | [ExtensionAttribute(...)] | +| System.Tuple>> System.TupleExtensions.ToTuple`21(System.ValueTuple>>) | [ExtensionAttribute(...)] | +| System.Tuple>> System.TupleExtensions.ToTuple`20(System.ValueTuple>>) | [ExtensionAttribute(...)] | +| System.Tuple>> System.TupleExtensions.ToTuple`19(System.ValueTuple>>) | [ExtensionAttribute(...)] | +| System.Tuple>> System.TupleExtensions.ToTuple`18(System.ValueTuple>>) | [ExtensionAttribute(...)] | +| System.Tuple>> System.TupleExtensions.ToTuple`17(System.ValueTuple>>) | [ExtensionAttribute(...)] | +| System.Tuple>> System.TupleExtensions.ToTuple`16(System.ValueTuple>>) | [ExtensionAttribute(...)] | +| System.Tuple>> System.TupleExtensions.ToTuple`15(System.ValueTuple>>) | [ExtensionAttribute(...)] | +| System.Tuple> System.TupleExtensions.ToTuple`14(System.ValueTuple>) | [ExtensionAttribute(...)] | +| System.Tuple System.TupleExtensions.ToTuple`7(System.ValueTuple) | [ExtensionAttribute(...)] | +| System.Tuple System.TupleExtensions.ToTuple`6(System.ValueTuple) | [ExtensionAttribute(...)] | +| System.Tuple System.TupleExtensions.ToTuple`5(System.ValueTuple) | [ExtensionAttribute(...)] | +| System.Tuple System.TupleExtensions.ToTuple`4(System.ValueTuple) | [ExtensionAttribute(...)] | +| System.Tuple System.TupleExtensions.ToTuple`3(System.ValueTuple) | [ExtensionAttribute(...)] | +| System.Tuple System.TupleExtensions.ToTuple`2(System.ValueTuple) | [ExtensionAttribute(...)] | +| System.Tuple System.TupleExtensions.ToTuple`1(System.ValueTuple) | [ExtensionAttribute(...)] | | System.TupleExtensions | [ExtensionAttribute(...)] | +| System.Type System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.get_Type() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Object.GetType() | [IntrinsicAttribute(...)] | +| System.Type System.Reflection.Metadata.MetadataUpdateHandlerAttribute.get_HandlerType() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Reflection.NullabilityInfo.get_Type() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Reflection.SignatureTypeExtensions.TryMakeArrayType(System.Type) | [ExtensionAttribute(...)] | +| System.Type System.Reflection.SignatureTypeExtensions.TryMakeArrayType(System.Type,System.Int32) | [ExtensionAttribute(...)] | +| System.Type System.Reflection.SignatureTypeExtensions.TryMakeByRefType(System.Type) | [ExtensionAttribute(...)] | +| System.Type System.Reflection.SignatureTypeExtensions.TryMakeGenericType(System.Type,System.Type[]) | [ExtensionAttribute(...)] | +| System.Type System.Reflection.SignatureTypeExtensions.TryMakePointerType(System.Type) | [ExtensionAttribute(...)] | +| System.Type System.Reflection.SignatureTypeExtensions.TryResolve(System.Reflection.SignatureType,System.Type[]) | [ExtensionAttribute(...)] | +| System.Type System.Reflection.SignatureTypeExtensions.TryResolveAgainstGenericMethod(System.Reflection.SignatureType,System.Reflection.MethodInfo) | [ExtensionAttribute(...)] | +| System.Type System.Runtime.CompilerServices.AsyncMethodBuilderAttribute.get_BuilderType() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Runtime.CompilerServices.FixedBufferAttribute.get_ElementType() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Runtime.CompilerServices.StateMachineAttribute.get_StateMachineType() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Runtime.CompilerServices.TypeForwardedToAttribute.get_Destination() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Runtime.InteropServices.CoClassAttribute.get_CoClass() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Runtime.InteropServices.ComDefaultInterfaceAttribute.get_Value() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Runtime.InteropServices.ComEventInterfaceAttribute.get_EventProvider() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Runtime.InteropServices.ComEventInterfaceAttribute.get_SourceInterface() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Security.SecurityException.get_PermissionType() | [CompilerGeneratedAttribute(...)] | +| System.Type System.Type.GetTypeFromHandle(System.RuntimeTypeHandle) | [IntrinsicAttribute(...)] | | System.Type.<>c | [CompilerGeneratedAttribute(...)] | +| System.Type[] | [ParamArrayAttribute(...)] | +| System.Type[] System.Diagnostics.Tracing.EventSource.EventMetadata.g__GetParameterTypes\|22_0(System.Reflection.ParameterInfo[]) | [CompilerGeneratedAttribute(...)] | +| System.Type[] System.Reflection.ReflectionTypeLoadException.get_Types() | [CompilerGeneratedAttribute(...)] | +| System.Type[] System.Reflection.TypeInfo.g__GetDeclaredOnlyNestedTypes\|22_0(System.Type) | [CompilerGeneratedAttribute(...)] | +| System.Type[][] | [ParamArrayAttribute(...)] | | System.TypedReference | [IsByRefLikeAttribute(...)] | | System.TypedReference | [NonVersionableAttribute(...)] | +| System.UInt16 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.UInt16) | [IntrinsicAttribute(...)] | +| System.UInt16 System.Math.Max(System.UInt16,System.UInt16) | [NonVersionableAttribute(...)] | +| System.UInt16 System.Math.Min(System.UInt16,System.UInt16) | [NonVersionableAttribute(...)] | +| System.UInt16 System.Number.FloatingPointInfo.get_DenormalMantissaBits() | [CompilerGeneratedAttribute(...)] | +| System.UInt16 System.Number.FloatingPointInfo.get_NormalMantissaBits() | [CompilerGeneratedAttribute(...)] | +| System.UInt16 System.Runtime.CompilerServices.RuntimeHelpers.GetElementSize(System.Array) | [ExtensionAttribute(...)] | +| System.UInt16 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.UInt16 System.Threading.Volatile.Read(System.UInt16) | [IntrinsicAttribute(...)] | +| System.UInt16 System.Threading.Volatile.Read(System.UInt16) | [NonVersionableAttribute(...)] | +| System.UInt32 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.UInt32) | [IntrinsicAttribute(...)] | +| System.UInt32 System.Math.Max(System.UInt32,System.UInt32) | [NonVersionableAttribute(...)] | +| System.UInt32 System.Math.Min(System.UInt32,System.UInt32) | [NonVersionableAttribute(...)] | +| System.UInt32 System.Reflection.AssemblyAlgorithmIdAttribute.get_AlgorithmId() | [CompilerGeneratedAttribute(...)] | +| System.UInt32 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.UInt32 System.Text.CodePageDataItem.get_Flags() | [CompilerGeneratedAttribute(...)] | +| System.UInt32 System.Threading.Volatile.Read(System.UInt32) | [IntrinsicAttribute(...)] | +| System.UInt32 System.Threading.Volatile.Read(System.UInt32) | [NonVersionableAttribute(...)] | +| System.UInt32 System.UIntPtr.ToUInt32() | [NonVersionableAttribute(...)] | +| System.UInt32 System.UIntPtr.op_Explicit(System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.UInt64 Interop.Sys.GetTimestamp() | [SuppressGCTransitionAttribute(...)] | +| System.UInt64 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.UInt64) | [IntrinsicAttribute(...)] | +| System.UInt64 System.Marvin.get_DefaultSeed() | [CompilerGeneratedAttribute(...)] | +| System.UInt64 System.Math.g__SoftwareFallback\|47_0(System.UInt64,System.UInt64,System.UInt64) | [CompilerGeneratedAttribute(...)] | +| System.UInt64 System.Math.Max(System.UInt64,System.UInt64) | [NonVersionableAttribute(...)] | +| System.UInt64 System.Math.Min(System.UInt64,System.UInt64) | [NonVersionableAttribute(...)] | +| System.UInt64 System.Number.FloatingPointInfo.get_DenormalMantissaMask() | [CompilerGeneratedAttribute(...)] | +| System.UInt64 System.Number.FloatingPointInfo.get_InfinityBits() | [CompilerGeneratedAttribute(...)] | +| System.UInt64 System.Number.FloatingPointInfo.get_NormalMantissaMask() | [CompilerGeneratedAttribute(...)] | +| System.UInt64 System.Number.FloatingPointInfo.get_ZeroBits() | [CompilerGeneratedAttribute(...)] | +| System.UInt64 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | +| System.UInt64 System.Threading.Volatile.Read(System.UInt64) | [IntrinsicAttribute(...)] | +| System.UInt64 System.Threading.Volatile.Read(System.UInt64) | [NonVersionableAttribute(...)] | +| System.UInt64 System.UIntPtr.ToUInt64() | [NonVersionableAttribute(...)] | +| System.UInt64 System.UIntPtr.op_Explicit(System.UIntPtr) | [NonVersionableAttribute(...)] | | System.UIntPtr | [IsReadOnlyAttribute(...)] | +| System.UIntPtr | [NativeIntegerAttribute(...)] | | System.UIntPtr System.Array.NativeLength | [NativeIntegerAttribute(...)] | +| System.UIntPtr System.Math.Max(System.UIntPtr,System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.UIntPtr System.Math.Min(System.UIntPtr,System.UIntPtr) | [NonVersionableAttribute(...)] | | System.UIntPtr System.Runtime.InteropServices.CULong.Value | [NativeIntegerAttribute(...)] | +| System.UIntPtr System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [NonVersionableAttribute(...)] | | System.UIntPtr System.Runtime.InteropServices.SafeBuffer.Uninitialized | [NativeIntegerAttribute(...)] | +| System.UIntPtr System.Threading.Volatile.Read(System.UIntPtr) | [IntrinsicAttribute(...)] | +| System.UIntPtr System.Threading.Volatile.Read(System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.UIntPtr System.UIntPtr.Add(System.UIntPtr,System.Int32) | [NonVersionableAttribute(...)] | | System.UIntPtr System.UIntPtr.AdditiveIdentity | [NativeIntegerAttribute(...)] | | System.UIntPtr System.UIntPtr.MaxValue | [NativeIntegerAttribute(...)] | | System.UIntPtr System.UIntPtr.MinValue | [NativeIntegerAttribute(...)] | | System.UIntPtr System.UIntPtr.MultiplicativeIdentity | [NativeIntegerAttribute(...)] | | System.UIntPtr System.UIntPtr.One | [NativeIntegerAttribute(...)] | +| System.UIntPtr System.UIntPtr.Subtract(System.UIntPtr,System.Int32) | [NonVersionableAttribute(...)] | | System.UIntPtr System.UIntPtr.Zero | [NativeIntegerAttribute(...)] | +| System.UIntPtr System.UIntPtr.get_MaxValue() | [NonVersionableAttribute(...)] | +| System.UIntPtr System.UIntPtr.get_MinValue() | [NonVersionableAttribute(...)] | +| System.UIntPtr System.UIntPtr.op_Addition(System.UIntPtr,System.Int32) | [NonVersionableAttribute(...)] | +| System.UIntPtr System.UIntPtr.op_Explicit(System.UInt32) | [NonVersionableAttribute(...)] | +| System.UIntPtr System.UIntPtr.op_Explicit(System.UInt64) | [NonVersionableAttribute(...)] | +| System.UIntPtr System.UIntPtr.op_Explicit(System.Void*) | [NonVersionableAttribute(...)] | +| System.UIntPtr System.UIntPtr.op_Subtraction(System.UIntPtr,System.Int32) | [NonVersionableAttribute(...)] | | System.UIntPtr.Zero | [IntrinsicAttribute(...)] | +| System.ValueTuple> System.TupleExtensions.ToValueTuple`10(System.Tuple>) | [ExtensionAttribute(...)] | +| System.ValueTuple> System.TupleExtensions.ToValueTuple`9(System.Tuple>) | [ExtensionAttribute(...)] | +| System.ValueTuple> System.TupleExtensions.ToValueTuple`8(System.Tuple>) | [ExtensionAttribute(...)] | +| System.ValueTuple> System.TupleExtensions.ToValueTuple`11(System.Tuple>) | [ExtensionAttribute(...)] | +| System.ValueTuple> System.TupleExtensions.ToValueTuple`12(System.Tuple>) | [ExtensionAttribute(...)] | +| System.ValueTuple> System.TupleExtensions.ToValueTuple`13(System.Tuple>) | [ExtensionAttribute(...)] | +| System.ValueTuple>> System.TupleExtensions.ToValueTuple`21(System.Tuple>>) | [ExtensionAttribute(...)] | +| System.ValueTuple>> System.TupleExtensions.ToValueTuple`20(System.Tuple>>) | [ExtensionAttribute(...)] | +| System.ValueTuple>> System.TupleExtensions.ToValueTuple`19(System.Tuple>>) | [ExtensionAttribute(...)] | +| System.ValueTuple>> System.TupleExtensions.ToValueTuple`18(System.Tuple>>) | [ExtensionAttribute(...)] | +| System.ValueTuple>> System.TupleExtensions.ToValueTuple`17(System.Tuple>>) | [ExtensionAttribute(...)] | +| System.ValueTuple>> System.TupleExtensions.ToValueTuple`16(System.Tuple>>) | [ExtensionAttribute(...)] | +| System.ValueTuple>> System.TupleExtensions.ToValueTuple`15(System.Tuple>>) | [ExtensionAttribute(...)] | +| System.ValueTuple> System.TupleExtensions.ToValueTuple`14(System.Tuple>) | [ExtensionAttribute(...)] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`7(System.Tuple) | [ExtensionAttribute(...)] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`6(System.Tuple) | [ExtensionAttribute(...)] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`5(System.Tuple) | [ExtensionAttribute(...)] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`4(System.Tuple) | [ExtensionAttribute(...)] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`3(System.Tuple) | [ExtensionAttribute(...)] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`2(System.Tuple) | [ExtensionAttribute(...)] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`1(System.Tuple) | [ExtensionAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.Byte,System.Byte) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.Int16,System.Int16) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.Int32,System.Int32) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.Int64,System.Int64) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.IntPtr,System.IntPtr) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.SByte,System.SByte) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.UInt16,System.UInt16) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.UInt32,System.UInt32) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.UInt64,System.UInt64) | [NonVersionableAttribute(...)] | +| System.ValueTuple System.Math.DivRem(System.UIntPtr,System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.Version System.ApplicationId.get_Version() | [CompilerGeneratedAttribute(...)] | +| System.Version System.Reflection.AssemblyNameFormatter.CanonicalizeVersion(System.Version) | [ExtensionAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.InitBlockUnaligned(System.Byte,System.Byte,System.UInt32) | [IntrinsicAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.InitBlockUnaligned(System.Byte,System.Byte,System.UInt32) | [NonVersionableAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.SkipInit`1(!0) | [IntrinsicAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.SkipInit`1(!0) | [NonVersionableAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.WriteUnaligned`1(System.Byte,!0) | [IntrinsicAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.WriteUnaligned`1(System.Byte,!0) | [NonVersionableAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.WriteUnaligned`1(System.Void*,!0) | [IntrinsicAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.WriteUnaligned`1(System.Void*,!0) | [NonVersionableAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.Write`1(System.Byte,!0) | [IntrinsicAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.Write`1(System.Byte,!0) | [NonVersionableAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.Write`1(System.Void*,!0) | [IntrinsicAttribute(...)] | +| System.Void Internal.Runtime.CompilerServices.Unsafe.Write`1(System.Void*,!0) | [NonVersionableAttribute(...)] | +| System.Void Interop.Sys.SetErrNo(System.Int32) | [SuppressGCTransitionAttribute(...)] | +| System.Void Interop.Sys.SetPosixSignalHandler(delegate* unmanaged) | [SuppressGCTransitionAttribute(...)] | +| System.Void Microsoft.Win32.SafeHandles.SafeFileHandle.set_IsAsync(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppContext.g__LogDataStore\|23_0(System.Diagnostics.Tracing.RuntimeEventSource,System.Collections.Generic.Dictionary) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppContext.add_FirstChanceException(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppContext.add_ProcessExit(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppContext.add_UnhandledException(System.UnhandledExceptionEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppContext.remove_FirstChanceException(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppContext.remove_ProcessExit(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppContext.remove_UnhandledException(System.UnhandledExceptionEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppDomain.add_DomainUnload(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppDomain.add_ReflectionOnlyAssemblyResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppDomain.remove_DomainUnload(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.AppDomain.remove_ReflectionOnlyAssemblyResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.ArgumentNullException.Throw(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.Array.g__GenericSort\|129_0`1(System.Array,System.Array,System.Int32,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Buffers.ArrayPoolEventSource.BufferAllocated(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferAllocatedReason) | [EventAttribute(...)] | +| System.Void System.Buffers.ArrayPoolEventSource.BufferDropped(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferDroppedReason) | [EventAttribute(...)] | +| System.Void System.Buffers.ArrayPoolEventSource.BufferRented(System.Int32,System.Int32,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Buffers.ArrayPoolEventSource.BufferReturned(System.Int32,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Buffers.ArrayPoolEventSource.BufferTrimPoll(System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Buffers.ArrayPoolEventSource.BufferTrimmed(System.Int32,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.ByReference`1..ctor(!0) | [IntrinsicAttribute(...)] | +| System.Void System.Char.ConvertToUtf32_ThrowInvalidArgs(System.UInt32) | [StackTraceHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__22.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__36.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__37.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__38.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__39.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__40.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__58.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__59.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__60.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__61.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__62.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.d__63.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Collections.Concurrent.ConcurrentQueue`1.d__26..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Collections.Concurrent.ConcurrentQueue`1.d__26.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Collections.Concurrent.ConcurrentQueue`1.d__26.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.ConsoleCancelEventArgs.set_Cancel(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.ConsolePal.g__ReadRowOrCol\|83_3(System.Int32,System.Int32,System.IO.StdInReader,System.ReadOnlySpan,System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.ConsolePal.g__TransferBytes\|83_0(System.ReadOnlySpan,System.IO.StdInReader) | [CompilerGeneratedAttribute(...)] | +| System.Void System.ConsolePal.g__IncrementX\|113_1(System.ConsolePal.<>c__DisplayClass113_0) | [CompilerGeneratedAttribute(...)] | +| System.Void System.ConsolePal.g__IncrementY\|113_0(System.ConsolePal.<>c__DisplayClass113_0) | [CompilerGeneratedAttribute(...)] | +| System.Void System.ConsolePal.InvalidateTerminalSettings() | [UnmanagedCallersOnlyAttribute(...)] | +| System.Void System.Convert.ThrowByteOverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowCharOverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowInt16OverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowInt32OverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowInt64OverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowSByteOverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowUInt16OverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowUInt32OverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Convert.ThrowUInt64OverflowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.DateOnly.g__ThrowOutOfRange\|25_0() | [CompilerGeneratedAttribute(...)] | +| System.Void System.DateTime.g__ThrowOutOfRange\|75_0() | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute.set_Condition(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.ExcludeFromCodeCoverageAttribute.set_Justification(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.RequiresAssemblyFilesAttribute.set_Url(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.RequiresUnreferencedCodeAttribute.set_Url(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.set_Justification(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.set_MessageId(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.set_Scope(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.set_Target(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.set_Justification(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.set_MessageId(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.set_Scope(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.set_Target(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Contracts.Contract.ReportFailure(System.Diagnostics.Contracts.ContractFailureKind,System.String,System.String,System.Exception) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.Diagnostics.Debug.Fail(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.Diagnostics.Debug.Fail(System.String,System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.Diagnostics.DebugProvider.Fail(System.String,System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.Diagnostics.DebuggerDisplayAttribute.set_Name(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.DebuggerDisplayAttribute.set_TargetTypeName(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.DebuggerDisplayAttribute.set_Type(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.DebuggerTypeProxyAttribute.set_TargetTypeName(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute.set_Description(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute.set_TargetTypeName(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.d__51..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.d__51.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.d__51.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_Count(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_CounterType(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_DisplayName(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_DisplayUnits(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_IntervalSec(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_Max(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_Mean(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_Metadata(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_Min(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_Name(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_Series(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayload.set_StandardDeviation(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.CounterPayloadType.set_Payload(System.Diagnostics.Tracing.CounterPayload) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_ActivityOptions(System.Diagnostics.Tracing.EventActivityOptions) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_Channel(System.Diagnostics.Tracing.EventChannel) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_EventId(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_Keywords(System.Diagnostics.Tracing.EventKeywords) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_Level(System.Diagnostics.Tracing.EventLevel) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_Message(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_Tags(System.Diagnostics.Tracing.EventTags) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_Task(System.Diagnostics.Tracing.EventTask) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventAttribute.set_Version(System.Byte) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventChannelAttribute.set_Enabled(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventChannelAttribute.set_EventChannelType(System.Diagnostics.Tracing.EventChannelType) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventCommandEventArgs.set_Arguments(System.Collections.Generic.IDictionary) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventCommandEventArgs.set_Command(System.Diagnostics.Tracing.EventCommand) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventDataAttribute.set_Name(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventFieldAttribute.set_Format(System.Diagnostics.Tracing.EventFieldFormat) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventFieldAttribute.set_Tags(System.Diagnostics.Tracing.EventFieldTags) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventListener.add_EventWritten(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventListener.remove_EventWritten(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventPayload.d__17..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventPayload.d__17.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventPayload.d__17.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventPipeEventDispatcher.EventListenerSubscription.set_Level(System.Diagnostics.Tracing.EventLevel) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventPipeEventDispatcher.EventListenerSubscription.set_MatchAnyKeywords(System.Diagnostics.Tracing.EventKeywords) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventSource.WriteCleanup(System.Runtime.InteropServices.GCHandle*,System.Int32) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventSourceAttribute.set_Guid(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventSourceAttribute.set_LocalizationResources(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventSourceAttribute.set_Name(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventSourceCreatedEventArgs.set_EventSource(System.Diagnostics.Tracing.EventSource) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventWrittenEventArgs.set_Payload(System.Collections.ObjectModel.ReadOnlyCollection) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.EventWrittenEventArgs.set_TimeStamp(System.DateTime) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadPoolDequeueWork(System.Int64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadPoolDequeueWorkObject(System.Object) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadPoolEnqueueWork(System.Int64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadPoolEnqueueWorkObject(System.Object) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadTransferReceive(System.Int64,System.Int32,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadTransferReceiveObj(System.Object,System.Int32,System.String) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadTransferSend(System.Int64,System.Int32,System.String,System.Boolean,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.ThreadTransferSendObj(System.Object,System.Int32,System.String,System.Boolean,System.Int32,System.Int32) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String,System.Boolean,System.Int32,System.Int32) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.d__39..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.d__39.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.d__39.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_CounterType(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_DisplayName(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_DisplayRateTimeScale(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_DisplayUnits(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_Increment(System.Double) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_IntervalSec(System.Single) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_Metadata(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_Name(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingCounterPayload.set_Series(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingEventCounter.set_DisplayRateTimeScale(System.TimeSpan) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingEventCounterPayloadType.set_Payload(System.Diagnostics.Tracing.IncrementingCounterPayload) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingPollingCounter.set_DisplayRateTimeScale(System.TimeSpan) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.IncrementingPollingCounterPayloadType.set_Payload(System.Diagnostics.Tracing.IncrementingCounterPayload) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AppDomainAssemblyResolveHandlerInvoked(System.UInt16,System.String,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AppDomainLoad_V1(System.UInt64,System.UInt32,System.String,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AppDomainMemAllocated(System.UInt64,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AppDomainMemSurvived(System.UInt64,System.UInt64,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AppDomainUnload_V1(System.UInt64,System.UInt32,System.String,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AssemblyLoadContextResolvingHandlerInvoked(System.UInt16,System.String,System.String,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AssemblyLoadFromResolveHandlerInvoked(System.UInt16,System.String,System.Boolean,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AssemblyLoadStart(System.UInt16,System.String,System.String,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AssemblyLoadStop(System.UInt16,System.String,System.String,System.String,System.String,System.String,System.Boolean,System.String,System.String,System.Boolean) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AssemblyLoad_V1(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AssemblyUnload_V1(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AuthenticodeVerificationStart_V1(System.UInt32,System.UInt32,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.AuthenticodeVerificationStop_V1(System.UInt32,System.UInt32,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.BulkType(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.CLRStackWalk(System.UInt16,System.Byte,System.Byte,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.CodeSymbols(System.UInt64,System.UInt16,System.UInt16,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ContentionStart_V1(System.Byte,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ContentionStop_V1(System.Byte,System.UInt16,System.Double) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DCEndCompleteV2() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DCStartCompleteV2() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DebugExceptionProcessingEnd() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DebugExceptionProcessingStart() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DebugIPCEventEnd() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DebugIPCEventStart() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DecreaseMemoryPressure(System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DestroyGCHandle(System.IntPtr,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.DomainModuleLoad_V1(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.String,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.EventSource(System.Int32,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionCatchStart(System.UInt64,System.UInt64,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionCatchStop() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionFilterStart(System.UInt64,System.UInt64,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionFilterStop() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionFinallyStart(System.UInt64,System.UInt64,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionFinallyStop() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionThrownStop() | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExceptionThrown_V1(System.String,System.String,System.IntPtr,System.UInt32,System.UInt16,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ExecutionCheckpoint(System.UInt16,System.String,System.Int64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.FinalizeObject(System.IntPtr,System.IntPtr,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCAllocationTick_V4(System.UInt32,System.UInt32,System.UInt16,System.UInt64,System.IntPtr,System.String,System.UInt32,System.IntPtr,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkEdge(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkMovedObjectRanges(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkNode(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkRCW(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkRootCCW(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkRootConditionalWeakTableElementEdge(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkRootEdge(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkRootStaticVar(System.UInt32,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCBulkSurvivingObjectRanges(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCCreateConcurrentThread_V1(System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCCreateSegment_V1(System.UInt64,System.UInt64,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCDynamicEvent(System.String,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCEnd_V1(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCFinalizersBegin_V1(System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCFinalizersEnd_V1(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCFitBucketInfo(System.UInt16,System.UInt16,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCFreeSegment_V1(System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCGenerationRange(System.Byte,System.IntPtr,System.UInt64,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCGlobalHeapHistory_V4(System.UInt64,System.Int32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt16,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCHeapStats_V2(System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.UInt16,System.UInt64,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCJoin_V2(System.UInt32,System.UInt32,System.UInt32,System.UInt16,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCLOHCompact(System.UInt16,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCMarkFinalizeQueueRoots(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCMarkHandles(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCMarkOlderGenerationRoots(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCMarkStackRoots(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCMarkWithType(System.UInt32,System.UInt16,System.UInt32,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCPerHeapHistory_V3(System.UInt16,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.IntPtr,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCRestartEEBegin_V1(System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCRestartEEEnd_V1(System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCSampledObjectAllocationHigh(System.IntPtr,System.IntPtr,System.UInt32,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCSampledObjectAllocationLow(System.IntPtr,System.IntPtr,System.UInt32,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCStart_V2(System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt16,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCSuspendEEBegin_V1(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCSuspendEEEnd_V1(System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCTerminateConcurrentThread_V1(System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GCTriggered(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GenAwareBegin(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.GenAwareEnd(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ILStubCacheHit(System.UInt16,System.UInt64,System.UInt64,System.UInt32,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ILStubGenerated(System.UInt16,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.String,System.String,System.String,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.IOThreadCreate_V1(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.IOThreadRetire_V1(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.IOThreadTerminate_V1(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.IOThreadUnretire_V1(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.IncreaseMemoryPressure(System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.JitInstrumentationData(System.UInt16,System.UInt32,System.UInt32,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.JitInstrumentationDataVerbose(System.UInt16,System.UInt32,System.UInt32,System.UInt64,System.UInt64,System.UInt32,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.KnownPathProbed(System.UInt16,System.String,System.UInt16,System.Int32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolIODequeue(System.IntPtr,System.IntPtr,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolIOEnqueue(System.IntPtr,System.IntPtr,System.Boolean,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolWorkerThreadAdjustmentAdjustment(System.Double,System.UInt32,System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadAdjustmentReasonMap,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolWorkerThreadAdjustmentSample(System.Double,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolWorkerThreadAdjustmentStats(System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.UInt16,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolWorkerThreadStart(System.UInt32,System.UInt32,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolWorkerThreadStop(System.UInt32,System.UInt32,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolWorkerThreadWait(System.UInt32,System.UInt32,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.LogThreadPoolWorkingThreadCount(System.UInt32,System.UInt16) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodDCEndV2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodDCEndVerboseV2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodDCStartV2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodDCStartVerboseV2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodDetails(System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodILToNativeMap(System.UInt64,System.UInt64,System.Byte,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJitInliningFailed(System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.Boolean,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJitInliningFailedAnsi(System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.Boolean) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJitInliningSucceeded(System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJitMemoryAllocatedForCode(System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJitTailCallFailed(System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.Boolean,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJitTailCallFailedAnsi(System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.Boolean) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJitTailCallSucceeded(System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.String,System.Boolean,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodJittingStarted_V1(System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.String,System.String,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodLoadVerbose_V2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.String,System.String,System.String,System.UInt16,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodLoad_V2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.UInt16,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodUnloadVerbose_V2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.String,System.String,System.String,System.UInt16,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.MethodUnload_V2(System.UInt64,System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.UInt16,System.UInt64) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ModuleDCEndV2(System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ModuleDCStartV2(System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ModuleLoad_V2(System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.String,System.String,System.UInt16,System.Guid,System.UInt32,System.String,System.Guid,System.UInt32,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ModuleRangeLoad(System.UInt16,System.UInt64,System.UInt32,System.UInt32,System.Byte) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ModuleUnload_V2(System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.String,System.String,System.UInt16,System.Guid,System.UInt32,System.String,System.Guid,System.UInt32,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.PinObjectAtGCTime(System.IntPtr,System.IntPtr,System.UInt64,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ProcessEvent(System.UInt32,System.UInt32,System.DateTime,System.Guid,System.Guid,System.ReadOnlySpan) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ProfilerMessage(System.UInt16,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.R2RGetEntryPoint(System.UInt64,System.String,System.String,System.String,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.R2RGetEntryPointStart(System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ResolutionAttempted(System.UInt16,System.String,System.UInt16,System.String,System.UInt16,System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.RuntimeInformationStart(System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt32,System.Byte,System.String,System.Guid,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.SetGCHandle(System.IntPtr,System.IntPtr,System.UInt32,System.UInt32,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.StrongNameVerificationStart_V1(System.UInt32,System.UInt32,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.StrongNameVerificationStop_V1(System.UInt32,System.UInt32,System.String,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadCreated(System.UInt64,System.UInt64,System.UInt32,System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadCreating(System.IntPtr,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadDomainEnter(System.UInt64,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolIODequeue(System.IntPtr,System.IntPtr,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolIODequeue(System.Threading.RegisteredWaitHandle) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolIOEnqueue(System.IntPtr,System.IntPtr,System.Boolean,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolIOEnqueue(System.Threading.RegisteredWaitHandle) | [NonEventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolWorkerThreadAdjustmentAdjustment(System.Double,System.UInt32,System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadAdjustmentReasonMap,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolWorkerThreadAdjustmentSample(System.Double,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolWorkerThreadAdjustmentStats(System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.Double,System.UInt16,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolWorkerThreadStart(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolWorkerThreadStop(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolWorkerThreadWait(System.UInt32,System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadPoolWorkingThreadCount(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadRunning(System.IntPtr,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadTerminated(System.UInt64,System.UInt64,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadpoolSuspensionResumeThread(System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.ThreadpoolSuspensionSuspendThread(System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.TieredCompilationBackgroundJitStart(System.UInt16,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.TieredCompilationBackgroundJitStop(System.UInt16,System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.TieredCompilationPause(System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.TieredCompilationResume(System.UInt16,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.TieredCompilationSettings(System.UInt16,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.TypeLoadStart(System.UInt32,System.UInt16) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.TypeLoadStop(System.UInt32,System.UInt16,System.UInt16,System.UInt64,System.String) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.WorkerThreadCreate(System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.WorkerThreadRetire(System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.WorkerThreadTerminate(System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.WorkerThreadUnretire(System.UInt32,System.UInt32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.NativeRuntimeEventSource.YieldProcessorMeasurement(System.UInt16,System.Double,System.Double) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.PollingPayloadType.set_Payload(System.Diagnostics.Tracing.CounterPayload) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Diagnostics.Tracing.RuntimeEventSource.LogAppContextSwitch(System.String,System.Int32) | [EventAttribute(...)] | +| System.Void System.Diagnostics.Tracing.TraceLoggingMetadataCollector.set_Tags(System.Diagnostics.Tracing.EventFieldTags) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Environment.Exit(System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.Environment.FailFast(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.Environment.FailFast(System.String,System.Exception) | [DoesNotReturnAttribute(...)] | +| System.Void System.Environment.FailFast(System.String,System.Exception,System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.Environment._Exit(System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.Exception.g__Write\|60_0(System.String,System.Span) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Exception.OnDeserialized(System.Runtime.Serialization.StreamingContext) | [OnDeserializedAttribute(...)] | +| System.Void System.Exception.SetCurrentStackTrace() | [StackTraceHiddenAttribute(...)] | +| System.Void System.GC.KeepAlive(System.Object) | [IntrinsicAttribute(...)] | +| System.Void System.Globalization.CalendarData.EnumCalendarInfoCallback(System.Char*,System.IntPtr) | [UnmanagedCallersOnlyAttribute(...)] | +| System.Void System.Globalization.CompareInfo.CheckCompareOptionsForCompare(System.Globalization.CompareOptions) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Globalization.CompareInfo.OnDeserialized(System.Runtime.Serialization.StreamingContext) | [OnDeserializedAttribute(...)] | +| System.Void System.Globalization.CompareInfo.OnDeserializing(System.Runtime.Serialization.StreamingContext) | [OnDeserializingAttribute(...)] | +| System.Void System.Globalization.CompareInfo.OnSerializing(System.Runtime.Serialization.StreamingContext) | [OnSerializingAttribute(...)] | +| System.Void System.Globalization.CompareInfo.ThrowCompareOptionsCheckFailed(System.Globalization.CompareOptions) | [DoesNotReturnAttribute(...)] | +| System.Void System.Globalization.CompareInfo.ThrowCompareOptionsCheckFailed(System.Globalization.CompareOptions) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Globalization.DateTimeFormatInfo.g__ThrowInvalid\|220_0(System.Globalization.DateTimeStyles,System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Globalization.NumberFormatInfo.g__ThrowInvalid\|137_0(System.Globalization.NumberStyles) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Globalization.NumberFormatInfo.g__ThrowInvalid\|136_0(System.Globalization.NumberStyles) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Guid.GuidResult.SetFailure(System.Boolean,System.String) | [IsReadOnlyAttribute(...)] | +| System.Void System.IO.BinaryWriter.g__WriteToOutStream\|39_0(System.Byte[],System.Int32,System.Int32,System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.BufferedStream.d__69.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.BufferedStream.d__33.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.BufferedStream.d__36.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.BufferedStream.d__40.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.BufferedStream.d__49.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.BufferedStream.d__60.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Enumeration.FileSystemEntry.set_Directory(System.ReadOnlySpan) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.Enumeration.FileSystemEntry.set_OriginalRootDirectory(System.ReadOnlySpan) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.Enumeration.FileSystemEntry.set_RootDirectory(System.ReadOnlySpan) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.Enumeration.FileSystemEnumerable`1.set_ShouldIncludePredicate(System.IO.Enumeration.FileSystemEnumerable.FindPredicate) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.Enumeration.FileSystemEnumerable`1.set_ShouldRecursePredicate(System.IO.Enumeration.FileSystemEnumerable.FindPredicate) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.EnumerationOptions.set_AttributesToSkip(System.IO.FileAttributes) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.EnumerationOptions.set_BufferSize(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.EnumerationOptions.set_IgnoreInaccessible(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.EnumerationOptions.set_MatchCasing(System.IO.MatchCasing) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.EnumerationOptions.set_MatchType(System.IO.MatchType) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.EnumerationOptions.set_RecurseSubdirectories(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.EnumerationOptions.set_ReturnSpecialDirectories(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.File.<g__Core\|72_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.File.d__70.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.File.d__71.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.File.d__75.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.File.d__66.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.File.d__78.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.File.d__79.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.FileStatus.set_InitiallyDirectory(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.FileSystem.g__GetLinkTargetFullPath\|27_0(System.Text.ValueStringBuilder,System.ReadOnlySpan) | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.d__59.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.d__28.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.d__57.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.d__39.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.d__38.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.d__50.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.d__49.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Stream.<g__Core\|29_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Stream.<g__FinishReadAsync\|44_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.Stream.d__57.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamReader.d__68.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamReader.d__71.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamReader.d__63.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamReader.d__65.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamReader.g__ThrowObjectDisposedException\|72_0() | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.StreamReader.ThrowAsyncIOInProgress() | [DoesNotReturnAttribute(...)] | +| System.Void System.IO.StreamWriter.<g__Core\|76_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamWriter.d__37.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamWriter.g__ThrowObjectDisposedException\|77_0() | [CompilerGeneratedAttribute(...)] | +| System.Void System.IO.StreamWriter.d__65.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamWriter.d__69.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.StreamWriter.ThrowAsyncIOInProgress() | [DoesNotReturnAttribute(...)] | +| System.Void System.IO.TextReader.d__20.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.TextReader.d__14.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.TextWriter.<g__WriteAsyncCore\|60_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IO.TextWriter.<g__WriteLineAsyncCore\|66_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.IntPtr..ctor(System.Int32) | [NonVersionableAttribute(...)] | +| System.Void System.IntPtr..ctor(System.Int64) | [NonVersionableAttribute(...)] | +| System.Void System.IntPtr..ctor(System.Void*) | [NonVersionableAttribute(...)] | +| System.Void System.LazyHelper.ThrowException() | [DoesNotReturnAttribute(...)] | +| System.Void System.LocalDataStoreSlot.set_Data(System.Threading.ThreadLocal) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Math.ThrowAbsOverflow() | [DoesNotReturnAttribute(...)] | +| System.Void System.Math.ThrowAbsOverflow() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Math.ThrowMinMaxException`1(!0,!0) | [DoesNotReturnAttribute(...)] | +| System.Void System.MemoryExtensions.CopyTo`1(!0[],System.Memory) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.CopyTo`1(!0[],System.Span) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.Reverse`1(System.Span) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.Sort`1(System.Span) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.Sort`1(System.Span,System.Comparison) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.Sort`2(System.Span,!1) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.Sort`2(System.Span,System.Span) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.Sort`2(System.Span,System.Span,System.Comparison) | [ExtensionAttribute(...)] | +| System.Void System.MemoryExtensions.Sort`3(System.Span,System.Span,!2) | [ExtensionAttribute(...)] | +| System.Void System.ModuleHandle.g__ThrowInvalidOperationException\|11_0() | [CompilerGeneratedAttribute(...)] | +| System.Void System.ModuleHandle.g__ThrowInvalidOperationException\|11_0() | [DoesNotReturnAttribute(...)] | +| System.Void System.ModuleHandle.g__ThrowInvalidOperationException\|11_0() | [StackTraceHiddenAttribute(...)] | +| System.Void System.MulticastDelegate.CtorClosed(System.Object,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.CtorClosedStatic(System.Object,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.CtorCollectibleClosedStatic(System.Object,System.IntPtr,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.CtorCollectibleOpened(System.Object,System.IntPtr,System.IntPtr,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.CtorCollectibleVirtualDispatch(System.Object,System.IntPtr,System.IntPtr,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.CtorOpened(System.Object,System.IntPtr,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.CtorRTClosed(System.Object,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.CtorVirtualDispatch(System.Object,System.IntPtr,System.IntPtr) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.ThrowNullThisInDelegateToInstance() | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.MulticastDelegate.ThrowNullThisInDelegateToInstance() | [DoesNotReturnAttribute(...)] | +| System.Void System.Nullable`1..ctor(!0) | [NonVersionableAttribute(...)] | +| System.Void System.Number.ThrowOverflowException(System.TypeCode) | [DoesNotReturnAttribute(...)] | +| System.Void System.Number.ThrowOverflowOrFormatException(System.Number.ParsingStatus,System.TypeCode) | [DoesNotReturnAttribute(...)] | +| System.Void System.Numerics.Vector2..ctor(System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector2..ctor(System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector2.CopyTo(System.Single[]) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector2.CopyTo(System.Single[]) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector2.CopyTo(System.Single[],System.Int32) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector2.CopyTo(System.Single[],System.Int32) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector2.CopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector3..ctor(System.Numerics.Vector2,System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector3..ctor(System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector3..ctor(System.Single,System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector3.CopyTo(System.Single[]) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector3.CopyTo(System.Single[]) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector3.CopyTo(System.Single[],System.Int32) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector3.CopyTo(System.Single[],System.Int32) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector3.CopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector4..ctor(System.Numerics.Vector2,System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector4..ctor(System.Numerics.Vector3,System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector4..ctor(System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector4..ctor(System.Single,System.Single,System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector4.CopyTo(System.Single[]) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector4.CopyTo(System.Single[]) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector4.CopyTo(System.Single[],System.Int32) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector4.CopyTo(System.Single[],System.Int32) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector4.CopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector.ThrowInsufficientNumberOfElementsException(System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector`1..ctor(!0) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector`1..ctor(!0[]) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector`1..ctor(!0[],System.Int32) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector`1.CopyTo(!0[]) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector`1.CopyTo(!0[]) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector`1.CopyTo(!0[],System.Int32) | [IntrinsicAttribute(...)] | +| System.Void System.Numerics.Vector`1.CopyTo(!0[],System.Int32) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector`1.CopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Void System.Numerics.Vector`1.CopyTo(System.Span) | [IsReadOnlyAttribute(...)] | +| System.Void System.Object..ctor() | [NonVersionableAttribute(...)] | +| System.Void System.Object.Finalize() | [NonVersionableAttribute(...)] | +| System.Void System.ObsoleteAttribute.set_DiagnosticId(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.ObsoleteAttribute.set_UrlFormat(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Progress`1.add_ProgressChanged(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Progress`1.remove_ProgressChanged(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.AssemblyNameFormatter.AppendQuoted(System.Text.StringBuilder,System.String) | [ExtensionAttribute(...)] | +| System.Void System.Reflection.EventInfo.AddEventHandler(System.Object,System.Delegate) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.EventInfo.AddEventHandler(System.Object,System.Delegate) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.EventInfo.RemoveEventHandler(System.Object,System.Delegate) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.EventInfo.RemoveEventHandler(System.Object,System.Delegate) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.FieldInfo.SetValue(System.Object,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.FieldInfo.SetValue(System.Object,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.MdFieldInfo.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.MdFieldInfo.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.MdFieldInfo.SetValueDirect(System.TypedReference,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.MdFieldInfo.SetValueDirect(System.TypedReference,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.NullabilityInfo.set_ReadState(System.Reflection.NullabilityState) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.NullabilityInfo.set_WriteState(System.Reflection.NullabilityState) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.ObfuscateAssemblyAttribute.set_StripAfterObfuscation(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.ObfuscationAttribute.set_ApplyToMembers(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.ObfuscationAttribute.set_Exclude(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.ObfuscationAttribute.set_Feature(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.ObfuscationAttribute.set_StripAfterObfuscation(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.PropertyInfo.SetValue(System.Object,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.PropertyInfo.SetValue(System.Object,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.PropertyInfo.SetValue(System.Object,System.Object,System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.PropertyInfo.SetValue(System.Object,System.Object,System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.RtFieldInfo.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.RtFieldInfo.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.RtFieldInfo.SetValueDirect(System.TypedReference,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.RtFieldInfo.SetValueDirect(System.TypedReference,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.RuntimeAssembly.add__ModuleResolve(System.Reflection.ModuleResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.RuntimeAssembly.remove__ModuleResolve(System.Reflection.ModuleResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Reflection.RuntimeConstructorInfo.ThrowNoInvokeException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Reflection.RuntimeMethodInfo.ThrowNoInvokeException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Reflection.RuntimePropertyInfo.SetValue(System.Object,System.Object,System.Object[]) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.RuntimePropertyInfo.SetValue(System.Object,System.Object,System.Object[]) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.RuntimePropertyInfo.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.RuntimePropertyInfo.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Reflection.TypeInfo.d__10..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.TypeInfo.d__10.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.TypeInfo.d__10.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.TypeInfo.d__22..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.TypeInfo.d__22.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Reflection.TypeInfo.d__22.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Resources.ResourceFallbackManager.d__5..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Resources.ResourceFallbackManager.d__5.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Resources.ResourceFallbackManager.d__5.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.AsyncMethodBuilderCore.Start`1(!0) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start`1(!0) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Runtime.CompilerServices.AsyncTaskMethodBuilder`1.Start`1(!0) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Runtime.CompilerServices.AsyncVoidMethodBuilder.Start`1(!0) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef(System.Array,System.Int32,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef(System.Array,System.Int32,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef(System.Array,System.Int32,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef_Helper(System.Object,System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef_Helper(System.Object,System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef_Helper(System.Object,System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef_Helper_NoCacheLookup(System.Object,System.Void*,System.Object) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef_Helper_NoCacheLookup(System.Object,System.Void*,System.Object) | [DebuggerStepThroughAttribute(...)] | +| System.Void System.Runtime.CompilerServices.CastHelpers.StelemRef_Helper_NoCacheLookup(System.Object,System.Void*,System.Object) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.ConfiguredTaskAwaitable.ConfiguredTaskAwaiter.GetResult() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.ContractHelper.TriggerFailure(System.Diagnostics.Contracts.ContractFailureKind,System.String,System.String,System.String,System.Exception) | [DebuggerNonUserCodeAttribute(...)] | +| System.Void System.Runtime.CompilerServices.ContractHelper.add_InternalContractFailed(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.CompilerServices.ContractHelper.remove_InternalContractFailed(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.CompilerServices.InternalsVisibleToAttribute.set_AllInternalsVisible(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.CompilerServices.RuntimeCompatibilityAttribute.set_WrapNonExceptionThrows(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.DispatchTailCalls(System.IntPtr,delegate* managed,System.IntPtr) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.InitializeArray(System.Array,System.RuntimeFieldHandle) | [IntrinsicAttribute(...)] | +| System.Void System.Runtime.CompilerServices.TaskAwaiter.GetResult() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(System.Threading.Tasks.Task) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(System.Threading.Tasks.Task) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(System.Threading.Tasks.Task) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() | [DoesNotReturnAttribute(...)] | +| System.Void System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw(System.Exception) | [DoesNotReturnAttribute(...)] | +| System.Void System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw(System.Exception) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Runtime.InteropServices.ComWrappers.SetGlobalInstanceRegisteredForMarshalling(System.Int64) | [SuppressGCTransitionAttribute(...)] | +| System.Void System.Runtime.InteropServices.ComWrappers.SetGlobalInstanceRegisteredForTrackerSupport(System.Int64) | [SuppressGCTransitionAttribute(...)] | +| System.Void System.Runtime.InteropServices.MemoryMarshal.d__18`1..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.InteropServices.MemoryMarshal.d__18`1.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.InteropServices.MemoryMarshal.d__18`1.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.InteropServices.NFloat..ctor(System.Double) | [NonVersionableAttribute(...)] | +| System.Void System.Runtime.InteropServices.NFloat..ctor(System.Single) | [NonVersionableAttribute(...)] | +| System.Void System.Runtime.InteropServices.PosixSignalContext.set_Cancel(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.InteropServices.PosixSignalContext.set_Signal(System.Runtime.InteropServices.PosixSignal) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.InteropServices.PosixSignalRegistration.g__HandleSignal\|10_0(System.Object) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.d__85..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.d__85.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.d__85.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.d__55..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.d__55.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.d__55.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.add_AssemblyLoad(System.AssemblyLoadEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.add_AssemblyResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.add_ResourceResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.add_TypeResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.add__resolving(System.Func) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.add__resolvingUnmanagedDll(System.Func) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.add__unloading(System.Action) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.remove_AssemblyLoad(System.AssemblyLoadEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.remove_AssemblyResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.remove_ResourceResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.remove_TypeResolve(System.ResolveEventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.remove__resolving(System.Func) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.remove__resolvingUnmanagedDll(System.Func) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.AssemblyLoadContext.remove__unloading(System.Action) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Loader.LibraryNameVariation.d__5..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.LibraryNameVariation.d__5.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Loader.LibraryNameVariation.d__5.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Runtime.Serialization.DeserializationTracker.set_DeserializationInProgress(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Serialization.SerializationInfo.set_IsAssemblyNameSetExplicit(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Serialization.SerializationInfo.set_IsFullTypeNameSetExplicit(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Runtime.Versioning.RequiresPreviewFeaturesAttribute.set_Url(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.RuntimeType.ActivatorCache.ctor>g__CtorNoopStub\|4_1(System.Object) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.AllowPartiallyTrustedCallersAttribute.set_PartialTrustVisibilityLevel(System.Security.PartialTrustVisibilityLevel) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.PermissionSet.Deny() | [ObsoleteAttribute(...)] | +| System.Void System.Security.Permissions.SecurityAttribute.set_Action(System.Security.Permissions.SecurityAction) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityAttribute.set_Unrestricted(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_Assertion(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_BindingRedirects(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_ControlAppDomain(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_ControlDomainPolicy(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_ControlEvidence(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_ControlPolicy(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_ControlPrincipal(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_ControlThread(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_Execution(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_Flags(System.Security.Permissions.SecurityPermissionFlag) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_Infrastructure(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_RemotingConfiguration(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_SerializationFormatter(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_SkipVerification(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.Permissions.SecurityPermissionAttribute.set_UnmanagedCode(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_Demanded(System.Object) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_DenySetInstance(System.Object) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_FailedAssemblyInfo(System.Reflection.AssemblyName) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_GrantedSet(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_Method(System.Reflection.MethodInfo) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_PermissionState(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_PermissionType(System.Type) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_PermitOnlySetInstance(System.Object) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_RefusedSet(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityException.set_Url(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Security.SecurityRulesAttribute.set_SkipVerificationInFullTrust(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.String.ThrowMustBeNullTerminatedString() | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.DecoderExceptionFallbackBuffer.Throw(System.Byte[],System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.DecoderFallbackBuffer.ThrowLastBytesRecursive(System.Byte[]) | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.EncoderFallbackBuffer.ThrowLastCharRecursive(System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.Encoding.ThrowBytesOverflow() | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.Encoding.ThrowCharsOverflow() | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.Encoding.ThrowCharsOverflow() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Text.Encoding.ThrowConversionOverflow() | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.Encoding.ThrowConversionOverflow() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Text.TranscodingStream.<g__DisposeAsyncCore\|30_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Text.TranscodingStream.<g__ReadAsyncCore\|41_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Text.TranscodingStream.<g__WriteAsyncCore\|50_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Text.TranscodingStream.g__InitializeReadDataStructures\|33_0() | [CompilerGeneratedAttribute(...)] | +| System.Void System.Text.TranscodingStream.g__InitializeReadDataStructures\|34_0() | [CompilerGeneratedAttribute(...)] | +| System.Void System.Text.TranscodingStream.ThrowIfDisposed() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Text.TranscodingStream.ThrowObjectDisposedException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Text.TranscodingStream.ThrowObjectDisposedException() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Text.Unicode.TextSegmentationUtility.Processor`1.set_CurrentCodeUnitOffset(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Text.Unicode.TextSegmentationUtility.Processor`1.set_CurrentType(System.Text.Unicode.GraphemeClusterBreakType) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.CancellationToken.ThrowOperationCanceledException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Threading.CancellationTokenRegistration.g__WaitForCallbackIfNecessary\|3_0(System.Int64,System.Threading.CancellationTokenSource.CallbackNode) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.CancellationTokenSource.Registrations.<>c.<b__12_0>d.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.CancellationTokenSource.Registrations.g__Contention\|13_0(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.ExecutionContext.ThrowNullContext() | [DoesNotReturnAttribute(...)] | +| System.Void System.Threading.ExecutionContext.ThrowNullContext() | [StackTraceHiddenAttribute(...)] | +| System.Void System.Threading.Interlocked.MemoryBarrier() | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Interlocked.ReadMemoryBarrier() | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Monitor.ThrowLockTakenException() | [DoesNotReturnAttribute(...)] | +| System.Void System.Threading.PortableThreadPool.WaitThreadNode.set_Next(System.Threading.PortableThreadPool.WaitThreadNode) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.RegisteredWaitHandle.set_TimeoutTimeMs(System.Int32) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.RegisteredWaitHandle.set_UserUnregisterWaitHandle(Microsoft.Win32.SafeHandles.SafeWaitHandle) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.RegisteredWaitHandle.set_UserUnregisterWaitHandleValue(System.IntPtr) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.RegisteredWaitHandle.set_WaitThread(System.Threading.PortableThreadPool.WaitThread) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.SemaphoreSlim.d__31.SetStateMachine(System.Runtime.CompilerServices.IAsyncStateMachine) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.SingleProducerSingleConsumerQueue`1.d__11..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.SingleProducerSingleConsumerQueue`1.d__11.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.SingleProducerSingleConsumerQueue`1.d__11.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.Sources.ManualResetValueTaskSourceCore`1.ThrowForFailedGetResult(System.Int16) | [StackTraceHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.Sources.ManualResetValueTaskSourceCore`1.set_RunContinuationsAsynchronously(System.Boolean) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.Tasks.TaskScheduler.add_UnobservedTaskException(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.Tasks.TaskScheduler.remove_UnobservedTaskException(System.EventHandler) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.Tasks.TaskToApm.ThrowArgumentException(System.IAsyncResult) | [DoesNotReturnAttribute(...)] | +| System.Void System.Threading.Tasks.ThreadPoolTaskScheduler.d__6..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.ThreadPoolTaskScheduler.d__6.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.ThreadPoolTaskScheduler.d__6.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.AwaitTaskContinuationScheduled(System.Int32,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.DebugFacilityMessage1(System.String,System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.DebugFacilityMessage(System.String,System.String) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.IncompleteAsyncMethod(System.Runtime.CompilerServices.IAsyncStateMachineBox) | [NonEventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.IncompleteAsyncMethod(System.String) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.NewID(System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.RunningContinuation(System.Int32,System.Int64) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.RunningContinuation(System.Int32,System.Object) | [NonEventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.RunningContinuationList(System.Int32,System.Int32,System.Int64) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.RunningContinuationList(System.Int32,System.Int32,System.Object) | [NonEventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.SetActivityId(System.Guid) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TaskCompleted(System.Int32,System.Int32,System.Int32,System.Boolean) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TaskScheduled(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TaskStarted(System.Int32,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TaskWaitBegin(System.Int32,System.Int32,System.Int32,System.Threading.Tasks.TplEventSource.TaskWaitBehavior,System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TaskWaitContinuationComplete(System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TaskWaitContinuationStarted(System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TaskWaitEnd(System.Int32,System.Int32,System.Int32) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TraceOperationBegin(System.Int32,System.String,System.Int64) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TraceOperationEnd(System.Int32,System.Threading.Tasks.AsyncCausalityStatus) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TraceOperationRelation(System.Int32,System.Threading.Tasks.CausalityRelation) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TraceSynchronousWorkBegin(System.Int32,System.Threading.Tasks.CausalitySynchronousWork) | [EventAttribute(...)] | +| System.Void System.Threading.Tasks.TplEventSource.TraceSynchronousWorkEnd(System.Threading.Tasks.CausalitySynchronousWork) | [EventAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__79..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__79.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__79.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__78..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__78.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__78.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__77..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__77.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.ThreadPool.d__77.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.TimerQueue.d__16..ctor(System.Int32) | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.TimerQueue.d__16.Dispose() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.TimerQueue.d__16.Reset() | [DebuggerHiddenAttribute(...)] | +| System.Void System.Threading.TimerQueue.set_ActiveCount(System.Int64) | [CompilerGeneratedAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Boolean,System.Boolean) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Boolean,System.Boolean) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Byte,System.Byte) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Byte,System.Byte) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Double,System.Double) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Double,System.Double) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Int16,System.Int16) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Int16,System.Int16) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Int32,System.Int32) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Int32,System.Int32) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Int64,System.Int64) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Int64,System.Int64) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.IntPtr,System.IntPtr) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.IntPtr,System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.SByte,System.SByte) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.SByte,System.SByte) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Single,System.Single) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.Single,System.Single) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UInt16,System.UInt16) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UInt16,System.UInt16) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UInt32,System.UInt32) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UInt32,System.UInt32) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UInt64,System.UInt64) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UInt64,System.UInt64) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UIntPtr,System.UIntPtr) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write(System.UIntPtr,System.UIntPtr) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.Volatile.Write`1(!0,!0) | [IntrinsicAttribute(...)] | +| System.Void System.Threading.Volatile.Write`1(!0,!0) | [NonVersionableAttribute(...)] | +| System.Void System.Threading.WaitHandleExtensions.SetSafeWaitHandle(System.Threading.WaitHandle,Microsoft.Win32.SafeHandles.SafeWaitHandle) | [ExtensionAttribute(...)] | +| System.Void System.ThrowHelper.ArgumentOutOfRangeException_Enum_Value() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowAddingDuplicateWithKeyArgumentException`1(!0) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowAggregateException(System.Collections.Generic.List) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException(System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException(System.ExceptionResource,System.ExceptionArgument) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_Argument_InvalidArrayType() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_BadComparer(System.Object) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_CannotExtractScalar(System.ExceptionArgument) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_DestinationTooShort() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_HandleNotAsync(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_HandleNotSync(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_InvalidHandle(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_OverlapAlignmentMismatch() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentException_TupleIncorrectType(System.Object) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentNullException(System.ExceptionArgument) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentNullException(System.ExceptionArgument,System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRangeException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRangeException(System.ExceptionArgument) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRangeException(System.ExceptionArgument,System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRangeException(System.ExceptionArgument,System.Int32,System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRangeException_NeedNonNegNum(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRangeException_PrecisionTooLarge() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRangeException_SymbolDoesNotFit() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRange_BadHourMinuteSecond() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRange_BadYearMonthDay() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRange_DayNumber(System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRange_IndexException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRange_Month(System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRange_TimeSpanTooLong() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArgumentOutOfRange_Year() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArraySegmentCtorValidationFailedExceptions(System.Array,System.Int32,System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowArrayTypeMismatchException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowCountArgumentOutOfRange_ArgumentOutOfRange_Count() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowEndOfFileException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowFormatException_BadFormatSpecifier() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowIndexArgumentOutOfRange_NeedNonNegNumException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowIndexOutOfRangeException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException(System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException(System.ExceptionResource,System.Exception) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_ConcurrentOperationsNotSupported() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_EnumCurrent(System.Int32) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_HandleIsNotInitialized() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_HandleIsNotPinned() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_InvalidOperation_EnumEnded() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_InvalidOperation_EnumFailedVersion() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_InvalidOperation_EnumNotStarted() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_InvalidOperation_EnumOpCantHappen() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidOperationException_InvalidOperation_NoValue() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowInvalidTypeWithPointersNotSupported(System.Type) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowKeyNotFoundException`1(!0) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowLengthArgumentOutOfRange_ArgumentOutOfRange_NeedNonNegNum() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowNotSupportedException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowNotSupportedException(System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowNotSupportedException_UnreadableStream() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowNotSupportedException_UnseekableStream() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowNotSupportedException_UnwritableStream() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowObjectDisposedException(System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowObjectDisposedException_FileClosed() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowObjectDisposedException_StreamClosed(System.String) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowOutOfMemoryException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowRankException(System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowSerializationException(System.ExceptionResource) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowStartIndexArgumentOutOfRange_ArgumentOutOfRange_Index() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowValueArgumentOutOfRange_NeedNonNegNumException() | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowWrongKeyTypeArgumentException`1(!0,System.Type) | [DoesNotReturnAttribute(...)] | +| System.Void System.ThrowHelper.ThrowWrongValueTypeArgumentException`1(!0,System.Type) | [DoesNotReturnAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`1(System.Tuple,!0) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`2(System.Tuple,!0,!1) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`3(System.Tuple,!0,!1,!2) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`4(System.Tuple,!0,!1,!2,!3) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`5(System.Tuple,!0,!1,!2,!3,!4) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`6(System.Tuple,!0,!1,!2,!3,!4,!5) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`7(System.Tuple,!0,!1,!2,!3,!4,!5,!6) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`8(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`9(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`10(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`11(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`12(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`13(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`14(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`15(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`16(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`17(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`18(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`19(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`20(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18,!19) | [ExtensionAttribute(...)] | +| System.Void System.TupleExtensions.Deconstruct`21(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18,!19,!20) | [ExtensionAttribute(...)] | +| System.Void System.UIntPtr..ctor(System.UInt32) | [NonVersionableAttribute(...)] | +| System.Void System.UIntPtr..ctor(System.UInt64) | [NonVersionableAttribute(...)] | +| System.Void System.UIntPtr..ctor(System.Void*) | [NonVersionableAttribute(...)] | +| System.Void System.Version.g__ThrowArgumentException\|32_0(System.String) | [CompilerGeneratedAttribute(...)] | +| System.Void* Internal.Runtime.CompilerServices.Unsafe.Add`1(System.Void*,System.Int32) | [IntrinsicAttribute(...)] | +| System.Void* Internal.Runtime.CompilerServices.Unsafe.Add`1(System.Void*,System.Int32) | [NonVersionableAttribute(...)] | +| System.Void* Internal.Runtime.CompilerServices.Unsafe.AsPointer`1(!0) | [IntrinsicAttribute(...)] | +| System.Void* Internal.Runtime.CompilerServices.Unsafe.AsPointer`1(!0) | [NonVersionableAttribute(...)] | +| System.Void* System.IntPtr.ToPointer() | [NonVersionableAttribute(...)] | +| System.Void* System.IntPtr.op_Explicit(System.IntPtr) | [NonVersionableAttribute(...)] | +| System.Void* System.UIntPtr.ToPointer() | [NonVersionableAttribute(...)] | +| System.Void* System.UIntPtr.op_Explicit(System.UIntPtr) | [NonVersionableAttribute(...)] | | System.__DTString | [IsByRefLikeAttribute(...)] | | bool | [IsReadOnlyAttribute(...)] | | byte | [IsReadOnlyAttribute(...)] | | char | [IsReadOnlyAttribute(...)] | +| char[] | [ParamArrayAttribute(...)] | | decimal | [IsReadOnlyAttribute(...)] | | decimal | [NonVersionableAttribute(...)] | | double | [IsReadOnlyAttribute(...)] | | float | [IsReadOnlyAttribute(...)] | | int | [IsReadOnlyAttribute(...)] | +| int[] | [ParamArrayAttribute(...)] | | long | [IsReadOnlyAttribute(...)] | +| long[] | [ParamArrayAttribute(...)] | +| object | [NotNullAttribute(...)] | +| object[] | [ParamArrayAttribute(...)] | +| out System.IntPtr | [NativeIntegerAttribute(...)] | +| out System.UIntPtr | [NativeIntegerAttribute(...)] | | sbyte | [IsReadOnlyAttribute(...)] | | short | [IsReadOnlyAttribute(...)] | +| string | [AllowNullAttribute(...)] | +| string | [DisallowNullAttribute(...)] | +| string | [NotNullAttribute(...)] | | string.Empty | [IntrinsicAttribute(...)] | +| string[] | [ParamArrayAttribute(...)] | | uint | [IsReadOnlyAttribute(...)] | | ulong | [IsReadOnlyAttribute(...)] | | ushort | [IsReadOnlyAttribute(...)] | attrArgNamed +| !0 System.Double.ILogB`1(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| !0 System.Half.ILogB`1(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| !0 System.Single.ILogB`1(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| Internal.Runtime.InteropServices.IsolatedComponentLoadContext Internal.Runtime.InteropServices.ComponentActivator.GetIsolatedComponentLoadContext(System.String) | [RequiresUnreferencedCodeAttribute(...)] | Url | https://aka.ms/dotnet-illink/nativehost | +| System.AppDomain System.AppDomain.CreateDomain(System.String) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0024 | +| System.AppDomain System.AppDomain.CreateDomain(System.String) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | | System.Attribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.Attribute | [AttributeUsageAttribute(...)] | Inherited | True | +| System.Attribute System.Diagnostics.Tracing.EventSource.GetCustomAttributeHelper(System.Reflection.MemberInfo,System.Type,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which has dynamically accessed members requirements, but EnsureDescriptorsInitialized does not access this member and is safe to call. | | System.AttributeUsageAttribute | [AttributeUsageAttribute(...)] | Inherited | True | +| System.AttributeUsageAttribute System.Reflection.CustomAttribute.GetAttributeUsage(System.RuntimeType) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Module.ResolveType is marked as RequiresUnreferencedCode because it relies on tokenswhich are not guaranteed to be stable across trimming. So if somebody hardcodes a token it could break.The usage here is not like that as all these tokens come from existing metadata loaded from some ILand so trimming has no effect (the tokens are read AFTER trimming occured). | +| System.Boolean System.Attribute.Equals(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Unused fields don't make a difference for equality | +| System.Boolean System.Byte.IsPow2(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.TryCreate`1(!0,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.TryParse(System.String,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.op_Equality(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.op_GreaterThan(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.op_GreaterThanOrEqual(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.op_Inequality(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.op_LessThan(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Byte.op_LessThanOrEqual(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.IsPow2(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.TryCreate`1(!0,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.TryParse(System.String,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.op_Equality(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.op_GreaterThan(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.op_GreaterThanOrEqual(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.op_Inequality(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.op_LessThan(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Char.op_LessThanOrEqual(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.TryParse(System.String,System.IFormatProvider,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.op_Equality(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.op_GreaterThan(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.op_GreaterThanOrEqual(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.op_Inequality(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.op_LessThan(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateOnly.op_LessThanOrEqual(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.TryParse(System.String,System.IFormatProvider,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.op_Equality(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.op_GreaterThan(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.op_GreaterThanOrEqual(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.op_Inequality(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.op_LessThan(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTime.op_LessThanOrEqual(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.TryParse(System.String,System.IFormatProvider,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.op_Equality(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.op_GreaterThan(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.op_GreaterThanOrEqual(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.op_Inequality(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.op_LessThan(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.DateTimeOffset.op_LessThanOrEqual(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.TryCreate`1(!0,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.TryParse(System.String,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.op_Equality(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.op_GreaterThan(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.op_GreaterThanOrEqual(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.op_Inequality(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.op_LessThan(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Decimal.op_LessThanOrEqual(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsFinite(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsInfinity(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsNaN(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsNegative(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsNegativeInfinity(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsNormal(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsPositiveInfinity(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsPow2(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.IsSubnormal(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.TryCreate`1(!0,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.TryParse(System.String,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.op_Equality(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.op_GreaterThan(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.op_GreaterThanOrEqual(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.op_Inequality(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.op_LessThan(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Double.op_LessThanOrEqual(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.TryParse(System.String,System.IFormatProvider,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.op_Equality(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.op_GreaterThan(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.op_GreaterThanOrEqual(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.op_Inequality(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.op_LessThan(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Guid.op_LessThanOrEqual(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsFinite(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsInfinity(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsNaN(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsNegative(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsNegativeInfinity(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsNormal(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsPositiveInfinity(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsPow2(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.IsSubnormal(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.TryCreate`1(!0,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.TryParse(System.String,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.op_Equality(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.op_GreaterThan(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.op_GreaterThanOrEqual(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.op_Inequality(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.op_LessThan(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Half.op_LessThanOrEqual(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.IsPow2(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.TryCreate`1(!0,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.TryParse(System.String,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.op_Equality(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.op_GreaterThan(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.op_GreaterThanOrEqual(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.op_Inequality(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.op_LessThan(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int16.op_LessThanOrEqual(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.IsPow2(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.TryCreate`1(!0,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.TryParse(System.String,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.op_Equality(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.op_GreaterThan(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.op_GreaterThanOrEqual(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.op_Inequality(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.op_LessThan(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int32.op_LessThanOrEqual(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.IsPow2(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.TryCreate`1(!0,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.TryParse(System.String,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.op_Equality(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.op_GreaterThan(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.op_GreaterThanOrEqual(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.op_Inequality(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.op_LessThan(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Int64.op_LessThanOrEqual(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.IsPow2(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.TryCreate`1(!0,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.TryParse(System.String,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.op_Equality(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.op_GreaterThan(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.op_GreaterThanOrEqual(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.op_Inequality(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.op_LessThan(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.IntPtr.op_LessThanOrEqual(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Reflection.CustomAttribute.FilterCustomAttributeRecord(System.Reflection.MetadataToken,System.Reflection.MetadataImport,System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.RuntimeType,System.Boolean,System.RuntimeType.ListBuilder,System.RuntimeType,System.IRuntimeMethodInfo,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Module.ResolveMethod and Module.ResolveType are marked as RequiresUnreferencedCode because they rely on tokenswhich are not guaranteed to be stable across trimming. So if somebody hardcodes a token it could break.The usage here is not like that as all these tokens come from existing metadata loaded from some ILand so trimming has no effect (the tokens are read AFTER trimming occured). | +| System.Boolean System.Reflection.Emit.TypeBuilder.IsAssignableFrom(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The GetInterfaces technically requires all interfaces to be preservedBut in this case it acts only on TypeBuilder which is never trimmed (as it's runtime created). | +| System.Boolean System.SByte.IsPow2(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.TryCreate`1(!0,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.TryParse(System.String,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.op_Equality(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.op_GreaterThan(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.op_GreaterThanOrEqual(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.op_Inequality(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.op_LessThan(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.SByte.op_LessThanOrEqual(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsFinite(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsInfinity(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsNaN(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsNegative(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsNegativeInfinity(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsNormal(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsPositiveInfinity(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsPow2(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.IsSubnormal(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.TryCreate`1(!0,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.TryParse(System.String,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.op_Equality(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.op_GreaterThan(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.op_GreaterThanOrEqual(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.op_Inequality(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.op_LessThan(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Single.op_LessThanOrEqual(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.TryParse(System.String,System.IFormatProvider,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.op_Equality(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.op_GreaterThan(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.op_GreaterThanOrEqual(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.op_Inequality(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.op_LessThan(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeOnly.op_LessThanOrEqual(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.TryParse(System.String,System.IFormatProvider,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.op_Equality(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.op_GreaterThan(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.op_GreaterThanOrEqual(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.op_Inequality(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.op_LessThan(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.TimeSpan.op_LessThanOrEqual(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.Type.ImplementInterface(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The GetInterfaces technically requires all interfaces to be preservedBut this method only compares the result against the passed in ifaceType.So if ifaceType exists, then trimming should have kept it implemented on any type. | +| System.Boolean System.UInt16.IsPow2(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.TryCreate`1(!0,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.TryParse(System.String,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.op_Equality(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.op_GreaterThan(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.op_GreaterThanOrEqual(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.op_Inequality(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.op_LessThan(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt16.op_LessThanOrEqual(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.IsPow2(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.TryCreate`1(!0,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.TryParse(System.String,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.op_Equality(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.op_GreaterThan(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.op_GreaterThanOrEqual(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.op_Inequality(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.op_LessThan(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt32.op_LessThanOrEqual(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.IsPow2(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.TryCreate`1(!0,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.TryParse(System.String,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.op_Equality(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.op_GreaterThan(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.op_GreaterThanOrEqual(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.op_Inequality(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.op_LessThan(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UInt64.op_LessThanOrEqual(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.IsPow2(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.TryCreate`1(!0,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.TryParse(System.String,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.op_Equality(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.op_GreaterThan(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.op_GreaterThanOrEqual(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.op_Inequality(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.op_LessThan(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.UIntPtr.op_LessThanOrEqual(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Boolean System.ValueType.Equals(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Trimmed fields don't make a difference for equality | | System.Buffers.ArrayPoolEventSource | [EventSourceAttribute(...)] | Guid | 0866B2B8-5CEF-5DB9-2612-0C0FFD814A44 | | System.Buffers.ArrayPoolEventSource | [EventSourceAttribute(...)] | Name | System.Buffers.ArrayPoolEventSource | +| System.Byte System.Byte.Abs(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Clamp(System.Byte,System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.LeadingZeroCount(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Log2(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Max(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Min(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.PopCount(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.RotateLeft(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.RotateRight(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.Sign(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.TrailingZeroCount(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_Addition(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_BitwiseAnd(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_BitwiseOr(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_Decrement(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_Division(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_ExclusiveOr(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_Increment(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_LeftShift(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_Modulus(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_Multiply(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_OnesComplement(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_RightShift(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_Subtraction(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_UnaryNegation(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte System.Byte.op_UnaryPlus(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Byte[] System.Diagnostics.Tracing.EventSource.CreateManifestAndDescriptors(System.Type,System.String,System.Diagnostics.Tracing.EventSource,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which has dynamically accessed members requirements, but its use of this method satisfies these requirements because it passes in the result of GetType with the same annotations. | | System.CLSCompliantAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.CLSCompliantAttribute | [AttributeUsageAttribute(...)] | Inherited | True | +| System.Char System.Char.Abs(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Clamp(System.Char,System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.LeadingZeroCount(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Log2(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Max(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Min(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.PopCount(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.RotateLeft(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.RotateRight(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.Sign(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.TrailingZeroCount(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_Addition(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_BitwiseAnd(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_BitwiseOr(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_Decrement(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_Division(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_ExclusiveOr(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_Increment(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_LeftShift(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_Modulus(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_Multiply(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_OnesComplement(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_RightShift(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_Subtraction(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_UnaryNegation(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Char System.Char.op_UnaryPlus(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.CodeDom.Compiler.GeneratedCodeAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.CodeDom.Compiler.GeneratedCodeAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Collections.KeyValuePairs | [DebuggerDisplayAttribute(...)] | Name | [{_key}] | | System.ContextStaticAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.DateOnly System.DateOnly.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.DateOnly System.DateOnly.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateOnly System.DateOnly.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateOnly System.DateOnly.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.DateTime System.DateTime.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.DateTime System.DateTime.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTime System.DateTime.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTime System.DateTime.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTime System.DateTime.op_Addition(System.DateTime,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTime System.DateTime.op_Subtraction(System.DateTime,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.DateTimeOffset System.DateTimeOffset.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.DateTimeOffset System.DateTimeOffset.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTimeOffset System.DateTimeOffset.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTimeOffset System.DateTimeOffset.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTimeOffset System.DateTimeOffset.op_Addition(System.DateTimeOffset,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.DateTimeOffset System.DateTimeOffset.op_Subtraction(System.DateTimeOffset,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Abs(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Clamp(System.Decimal,System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Max(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Min(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.Sign(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_Addition(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_Decrement(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_Division(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_Increment(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_Modulus(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_Multiply(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_Subtraction(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_UnaryNegation(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Decimal System.Decimal.op_UnaryPlus(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Diagnostics.CodeAnalysis.AllowNullAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Diagnostics.CodeAnalysis.DisallowNullAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Diagnostics.CodeAnalysis.DoesNotReturnAttribute | [AttributeUsageAttribute(...)] | Inherited | False | @@ -1014,15 +3980,111 @@ attrArgNamed | System.Diagnostics.Tracing.NativeRuntimeEventSource | [EventSourceAttribute(...)] | Name | Microsoft-Windows-DotNETRuntime | | System.Diagnostics.Tracing.RuntimeEventSource | [EventSourceAttribute(...)] | Guid | 49592C0F-5A05-516D-AA4B-A64E02026C89 | | System.Diagnostics.Tracing.RuntimeEventSource | [EventSourceAttribute(...)] | Name | System.Runtime | +| System.Diagnostics.Tracing.TraceLoggingEventTypes System.Diagnostics.Tracing.EventSource.EventMetadata.get_TraceLoggingEventTypes() | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Double System.Double.Abs(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Acos(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Acosh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Asin(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Asinh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Atan2(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Atan(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Atanh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.BitDecrement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.BitIncrement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Cbrt(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Ceiling(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Clamp(System.Double,System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.CopySign(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Cos(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Cosh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Exp(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Floor(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.FusedMultiplyAdd(System.Double,System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.IEEERemainder(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Log2(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Log10(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Log(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Log(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Max(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.MaxMagnitude(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Min(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.MinMagnitude(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Pow(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Round(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Round(System.Double,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Round`1(System.Double,!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Round`1(System.Double,!0,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.ScaleB`1(System.Double,!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Sign(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Sin(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Sinh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Sqrt(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Tan(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Tanh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.Truncate(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_Addition(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_BitwiseAnd(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_BitwiseOr(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_Decrement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_Division(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_ExclusiveOr(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_Increment(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_Modulus(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_Multiply(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_OnesComplement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_Subtraction(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_UnaryNegation(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.Double.op_UnaryPlus(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Double System.TimeSpan.op_Division(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Exception.SerializeObjectState | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0011 | | System.Exception.SerializeObjectState | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | | System.FlagsAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Globalization.CompareInfo.m_SortVersion | [OptionalFieldAttribute(...)] | VersionAdded | 3 | | System.Globalization.CompareInfo.m_name | [OptionalFieldAttribute(...)] | VersionAdded | 2 | +| System.Guid System.Guid.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Guid System.Guid.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Abs(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Acos(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Acosh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Asin(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Asinh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Atan2(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Atan(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Atanh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.BitDecrement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.BitIncrement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Cbrt(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Ceiling(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Clamp(System.Half,System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.CopySign(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Cos(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Cosh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.E | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.Epsilon | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Exp(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Floor(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.FusedMultiplyAdd(System.Half,System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.IEEERemainder(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Log2(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Log10(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Log(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Log(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Max(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.MaxMagnitude(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Min(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.MinMagnitude(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.NaN | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | @@ -1030,10 +4092,40 @@ attrArgNamed | System.Half System.Half.NegativeOne | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.NegativeZero | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.One | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.Pi | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.PositiveInfinity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Pow(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Round(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Round(System.Half,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Round`1(System.Half,!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Round`1(System.Half,!0,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.ScaleB`1(System.Half,!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Sign(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Sin(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Sinh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Sqrt(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Tan(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Tanh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.Tau | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.Truncate(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Half System.Half.Zero | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_Addition(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_BitwiseAnd(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_BitwiseOr(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_Decrement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_Division(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_ExclusiveOr(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_Increment(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_Modulus(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_Multiply(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_OnesComplement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_Subtraction(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_UnaryNegation(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Half System.Half.op_UnaryPlus(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IAdditionOperators`3 | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IAdditiveIdentity`2 | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IBinaryFloatingPoint`1 | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | @@ -1059,17 +4151,176 @@ attrArgNamed | System.IUnaryNegationOperators`2 | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IUnaryPlusOperators`2 | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IUnsignedNumber`1 | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Abs(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Clamp(System.Int16,System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.LeadingZeroCount(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Log2(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Max(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Min(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.PopCount(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.RotateLeft(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.RotateRight(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.Sign(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.TrailingZeroCount(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_Addition(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_BitwiseAnd(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_BitwiseOr(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_Decrement(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_Division(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_ExclusiveOr(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_Increment(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_LeftShift(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_Modulus(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_Multiply(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_OnesComplement(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_RightShift(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_Subtraction(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_UnaryNegation(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int16 System.Int16.op_UnaryPlus(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 Internal.Runtime.InteropServices.ComponentActivator.LoadAssemblyAndGetFunctionPointer(System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr) | [RequiresUnreferencedCodeAttribute(...)] | Url | https://aka.ms/dotnet-illink/nativehost | +| System.Int32 System.AppDomain.ExecuteAssembly(System.String,System.String[],System.Byte[],System.Configuration.Assemblies.AssemblyHashAlgorithm) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0003 | +| System.Int32 System.AppDomain.ExecuteAssembly(System.String,System.String[],System.Byte[],System.Configuration.Assemblies.AssemblyHashAlgorithm) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Int32 System.Attribute.GetHashCode() | [UnconditionalSuppressMessageAttribute(...)] | Justification | Unused fields don't make a difference for hashcode quality | +| System.Int32 System.Diagnostics.Tracing.EventSource.GetHelperCallFirstArg(System.Reflection.MethodInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The method calls MethodBase.GetMethodBody. Trimming application can change IL of various methodswhich can lead to change of behavior. This method only uses this to validate usage of event source APIs.In the worst case it will not be able to determine the value it's looking for and will not performany validation. | +| System.Int32 System.Int32.Abs(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Clamp(System.Int32,System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.LeadingZeroCount(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Log2(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Max(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Min(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.PopCount(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.RotateLeft(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.RotateRight(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.Sign(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.TrailingZeroCount(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_Addition(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_BitwiseAnd(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_BitwiseOr(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_Decrement(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_Division(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_ExclusiveOr(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_Increment(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_LeftShift(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_Modulus(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_Multiply(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_OnesComplement(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_RightShift(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_Subtraction(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_UnaryNegation(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int32 System.Int32.op_UnaryPlus(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Abs(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Clamp(System.Int64,System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.LeadingZeroCount(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Log2(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Max(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Min(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.PopCount(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.RotateLeft(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.RotateRight(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.Sign(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.TrailingZeroCount(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_Addition(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_BitwiseAnd(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_BitwiseOr(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_Decrement(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_Division(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_ExclusiveOr(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_Increment(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_LeftShift(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_Modulus(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_Multiply(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_OnesComplement(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_RightShift(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_Subtraction(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_UnaryNegation(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Int64 System.Int64.op_UnaryPlus(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr Internal.Runtime.InteropServices.ComponentActivator.InternalGetFunctionPointer(System.Runtime.Loader.AssemblyLoadContext,System.String,System.String,System.IntPtr) | [RequiresUnreferencedCodeAttribute(...)] | Url | https://aka.ms/dotnet-illink/nativehost | +| System.IntPtr System.IntPtr.Abs(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IntPtr System.IntPtr.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Clamp(System.IntPtr,System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.LeadingZeroCount(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Log2(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Max(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IntPtr System.IntPtr.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Min(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IntPtr System.IntPtr.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IntPtr System.IntPtr.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IntPtr System.IntPtr.NegativeOne | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IntPtr System.IntPtr.One | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.PopCount(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.RotateLeft(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.RotateRight(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.Sign(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.TrailingZeroCount(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.IntPtr System.IntPtr.Zero | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_Addition(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_BitwiseAnd(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_BitwiseOr(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_Decrement(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_Division(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_ExclusiveOr(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_Increment(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_LeftShift(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_Modulus(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_Multiply(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_OnesComplement(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_RightShift(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_Subtraction(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_UnaryNegation(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.IntPtr.op_UnaryPlus(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.IntPtr System.Runtime.InteropServices.Marshal.OffsetOf(System.Type,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Trimming doesn't affect types eligible for marshalling. Different exception for invalid inputs doesn't matter. | | System.NonSerializedAttribute | [AttributeUsageAttribute(...)] | Inherited | False | +| System.Object System.MarshalByRefObject.GetLifetimeService() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0010 | +| System.Object System.MarshalByRefObject.GetLifetimeService() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Object System.MarshalByRefObject.InitializeLifetimeService() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0010 | +| System.Object System.MarshalByRefObject.InitializeLifetimeService() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Object System.Reflection.RuntimeConstructorInfo.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | This ConstructorInfo instance represents the static constructor itself, so if this object was created, the static constructor exists. | +| System.Object System.Resources.ResourceReader.DeserializeObject(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | InitializeBinaryFormatter will get trimmed out when AllowCustomResourceTypes is set to false. When set to true, we will already throw a warning for this feature switch, so we suppress this one in order forthe user to only get one error. | +| System.Object System.Runtime.InteropServices.Marshal.BindToMoniker(System.String) | [RequiresUnreferencedCodeAttribute(...)] | Url | https://aka.ms/dotnet-illink/com | +| System.Object System.RuntimeType.CreateInstanceImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Implementation detail of Activator that linker intrinsically recognizes | +| System.Object[] System.Diagnostics.Tracing.EventSource.SerializeEventArgs(System.Int32,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | | System.ObsoleteAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.ParamArrayAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.ParamArrayAttribute | [AttributeUsageAttribute(...)] | Inherited | True | +| System.Reflection.Assembly Internal.Runtime.InteropServices.IsolatedComponentLoadContext.Load(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The trimmer warning is added to the constructor of this class since this method is a virtual one. | +| System.Reflection.Assembly System.Reflection.Assembly.LoadFromResolveHandler(System.Object,System.ResolveEventArgs) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The assembly is loaded by specifying a path outside of the single-file bundle, the location of the path will not be empty if the path exist, otherwise it will be handled as null | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.Byte[]) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0018 | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.Byte[]) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.String) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0018 | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.String) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoadFrom(System.String) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0018 | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoadFrom(System.String) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.GetFirstResolvedAssemblyFromResolvingEvent(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The code handles the Assembly.Location equals null | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.ResolveSatelliteAssembly(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Satellite assemblies have no code in them and loading is not a problem | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.ResolveSatelliteAssembly(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | Justification | This call is fine because native call runs before this and checks BindSatelliteResourceFromBundle | | System.Reflection.AssemblyAlgorithmIdAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Reflection.AssemblyCompanyAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Reflection.AssemblyConfigurationAttribute | [AttributeUsageAttribute(...)] | Inherited | False | @@ -1091,15 +4342,36 @@ attrArgNamed | System.Reflection.AssemblyTitleAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Reflection.AssemblyTrademarkAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Reflection.AssemblyVersionAttribute | [AttributeUsageAttribute(...)] | Inherited | False | +| System.Reflection.ConstructorInfo System.Reflection.Emit.TypeBuilder.GetConstructor(System.Type,System.Reflection.ConstructorInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | MakeGenericType is only called on a TypeBuilder which is not subject to trimming | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineConstructorNoLock(System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type[],System.Type[][],System.Type[][]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Reflection.Emit is not subject to trimming | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineDefaultConstructorNoLock(System.Reflection.MethodAttributes) | [UnconditionalSuppressMessageAttribute(...)] | Justification | GetConstructor is only called on a TypeBuilderInstantiation which is not subject to trimming | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineDefaultConstructorNoLock(System.Reflection.MethodAttributes) | [UnconditionalSuppressMessageAttribute(...)] | Justification | MakeGenericType is only called on a TypeBuilderInstantiation which is not subject to trimming | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineTypeInitializerNoLock() | [UnconditionalSuppressMessageAttribute(...)] | Justification | Reflection.Emit is not subject to trimming | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.TypeBuilder.DefineMethodNoLock(System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Reflection.Emit is not subject to trimming | +| System.Reflection.EventInfo System.Attribute.GetParentDefinition(System.Reflection.EventInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | rtAdd.DeclaringType is guaranteed to have the specified event because rtAdd.GetParentDefinition() returned a non-null MethodInfo. | +| System.Reflection.FieldInfo System.Reflection.Emit.TypeBuilder.GetField(System.Type,System.Reflection.FieldInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | MakeGenericType is only called on a TypeBuilder which is not subject to trimming | +| System.Reflection.FieldInfo[] System.Diagnostics.Tracing.ManifestBuilder.g__GetEnumFields\|18_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Trimmer does not trim enums | +| System.Reflection.MemberInfo System.Type.GetMemberWithSameMetadataDefinitionAs(System.Reflection.MemberInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | This is finding the MemberInfo with the same MetadataToken as specified MemberInfo. If the specified MemberInfo exists and wasn't trimmed, then the current Type's MemberInfo couldn't have been trimmed. | | System.Reflection.Metadata.MetadataUpdateHandlerAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | True | +| System.Reflection.MethodBase System.Reflection.Emit.ModuleBuilder.GetGenericMethodBaseDefinition(System.Reflection.MethodBase) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Module.ResolveMethod is marked as RequiresUnreferencedCode because it relies on tokens which are not guaranteed to be stable across trimming. So if somebody hardcodes a token it could break. The usage here is not like that as all these tokens come from existing metadata loaded from some IL and so trimming has no effect (the tokens are read AFTER trimming occured). | +| System.Reflection.MethodBase System.RuntimeType.GetMethodBase(System.RuntimeType,System.RuntimeMethodHandleInternal) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The code in this method looks up the method by name, but it always starts with a method handle.To get here something somwhere had to get the method handle and thus the method must exist. | +| System.Reflection.MethodInfo System.Reflection.Emit.TypeBuilder.GetMethod(System.Type,System.Reflection.MethodInfo) | [UnconditionalSuppressMessageAttribute(...)] | Justification | MakeGenericType is only called on a TypeBuilder which is not subject to trimming | +| System.Reflection.MethodInfo[] System.Diagnostics.StackTrace.g__GetDeclaredMethods\|28_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Using Reflection to find the state machine's corresponding method is safe because the corresponding method is the only caller of the state machine. If the state machine is present, the corresponding method will be, too. | +| System.Reflection.MethodInfo[] System.Reflection.TypeInfo.g__GetDeclaredOnlyMethods\|10_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The yield return state machine doesn't propagate annotations | | System.Reflection.ObfuscateAssemblyAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.Reflection.ObfuscateAssemblyAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Reflection.ObfuscationAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | True | | System.Reflection.ObfuscationAttribute | [AttributeUsageAttribute(...)] | Inherited | False | +| System.Reflection.PropertyInfo System.Attribute.GetParentDefinition(System.Reflection.PropertyInfo,System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | rtPropAccessor.DeclaringType is guaranteed to have the specified property because rtPropAccessor.GetParentDefinition() returned a non-null MethodInfo. | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Linker doesn't recognize GetPropertyImpl(BindingFlags.Public) but this is what the body is doing | +| System.Reflection.RuntimeAssembly System.Runtime.Loader.AssemblyLoadContext.InvokeResolveEvent(System.ResolveEventHandler,System.Reflection.RuntimeAssembly,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The code handles the Assembly.Location equals null | +| System.Reflection.RuntimeFieldInfo[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateFields(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Calls to GetInterfaces technically require all interfaces on ReflectedTypeBut this is not a public API to enumerate reflection items, all the public APIs which do thatshould be annotated accordingly. | +| System.Reflection.RuntimeMethodInfo System.Reflection.Associates.AssignAssociates(System.Int32,System.RuntimeType,System.RuntimeType) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Module.ResolveMethod is marked as RequiresUnreferencedCode because it relies on tokenswhich are not guaranteed to be stable across trimming. So if somebody hardcodes a token it could break.The usage here is not like that as all these tokens come from existing metadata loaded from some ILand so trimming has no effect (the tokens are read AFTER trimming occured). | | System.Reflection.StrongNameKeyPair | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0017 | | System.Reflection.StrongNameKeyPair | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | | System.Reflection.StrongNameKeyPair System.Reflection.AssemblyName.KeyPair | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0017 | | System.Reflection.StrongNameKeyPair System.Reflection.AssemblyName.KeyPair | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Reflection.TypeInfo System.Reflection.Emit.TypeBuilder.CreateTypeNoLock() | [UnconditionalSuppressMessageAttribute(...)] | Justification | Reflection.Emit is not subject to trimming | | System.Resources.NeutralResourcesLanguageAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.Resources.SatelliteContractVersionAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.Runtime.AssemblyTargetedPatchBandAttribute | [AttributeUsageAttribute(...)] | Inherited | False | @@ -1218,6 +4490,7 @@ attrArgNamed | System.Runtime.InteropServices.UnmanagedCallersOnlyAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Runtime.InteropServices.UnmanagedFunctionPointerAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.Runtime.InteropServices.UnmanagedFunctionPointerAttribute | [AttributeUsageAttribute(...)] | Inherited | False | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceInternal(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[],System.Threading.StackCrawlMark) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Implementation detail of Activator that linker intrinsically recognizes | | System.Runtime.Serialization.OnDeserializedAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Runtime.Serialization.OnDeserializingAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Runtime.Serialization.OnSerializedAttribute | [AttributeUsageAttribute(...)] | Inherited | False | @@ -1244,6 +4517,41 @@ attrArgNamed | System.Runtime.Versioning.UnsupportedOSPlatformAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Runtime.Versioning.UnsupportedOSPlatformGuardAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | True | | System.Runtime.Versioning.UnsupportedOSPlatformGuardAttribute | [AttributeUsageAttribute(...)] | Inherited | False | +| System.RuntimeType[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateInterfaces(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Calls to GetInterfaces technically require all interfaces on ReflectedTypeBut this is not a public API to enumerate reflection items, all the public APIs which do thatshould be annotated accordingly. | +| System.RuntimeType[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateNestedClasses(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Calls to ResolveTypeHandle technically require all types to be kept But this is not a public API to enumerate reflection items, all the public APIs which do that should be annotated accordingly. | +| System.SByte System.SByte.Abs(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Clamp(System.SByte,System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.LeadingZeroCount(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Log2(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Max(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Min(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.PopCount(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.RotateLeft(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.RotateRight(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.Sign(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.TrailingZeroCount(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_Addition(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_BitwiseAnd(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_BitwiseOr(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_Decrement(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_Division(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_ExclusiveOr(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_Increment(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_LeftShift(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_Modulus(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_Multiply(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_OnesComplement(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_RightShift(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_Subtraction(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_UnaryNegation(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.SByte System.SByte.op_UnaryPlus(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.Security.AllowPartiallyTrustedCallersAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | False | | System.Security.AllowPartiallyTrustedCallersAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.Security.IPermission | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0003 | @@ -1286,26 +4594,343 @@ attrArgNamed | System.Security.UnverifiableCodeAttribute | [AttributeUsageAttribute(...)] | AllowMultiple | True | | System.Security.UnverifiableCodeAttribute | [AttributeUsageAttribute(...)] | Inherited | False | | System.SerializableAttribute | [AttributeUsageAttribute(...)] | Inherited | False | +| System.Single System.Single.Abs(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Acos(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Acosh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Asin(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Asinh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Atan2(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Atan(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Atanh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.BitDecrement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.BitIncrement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Cbrt(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Ceiling(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Clamp(System.Single,System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.CopySign(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Cos(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Cosh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Exp(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Floor(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.FusedMultiplyAdd(System.Single,System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.IEEERemainder(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Log2(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Log10(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Log(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Log(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Max(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.MaxMagnitude(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Min(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.MinMagnitude(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Pow(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Round(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Round(System.Single,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Round`1(System.Single,!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Round`1(System.Single,!0,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.ScaleB`1(System.Single,!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Sign(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Sin(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Sinh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Sqrt(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Tan(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Tanh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.Truncate(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_Addition(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_BitwiseAnd(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_BitwiseOr(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_Decrement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_Division(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_ExclusiveOr(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_Increment(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_Modulus(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_Multiply(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_OnesComplement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_Subtraction(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_UnaryNegation(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Single System.Single.op_UnaryPlus(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.String System.AppContext.GetBaseDirectoryCore() | [UnconditionalSuppressMessageAttribute(...)] | Justification | Single File apps should always set APP_CONTEXT_BASE_DIRECTORY therefore code handles Assembly.Location equals null | +| System.String System.Diagnostics.Tracing.EventSource.GenerateManifest(System.Type,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which has dynamically accessed members requirements, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.String System.Diagnostics.Tracing.EventSource.GenerateManifest(System.Type,System.String,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which has dynamically accessed members requirements, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.String System.Runtime.CompilerServices.AsyncMethodBuilderCore.GetAsyncStateMachineDescription(System.Runtime.CompilerServices.IAsyncStateMachine) | [UnconditionalSuppressMessageAttribute(...)] | Justification | It's okay if unused fields disappear from debug views | | System.Text.Encoding System.Text.Encoding.UTF7 | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0001 | | System.Text.Encoding System.Text.Encoding.UTF7 | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | | System.Text.Encoding._isReadOnly | [OptionalFieldAttribute(...)] | VersionAdded | 2 | | System.ThreadStaticAttribute | [AttributeUsageAttribute(...)] | Inherited | False | +| System.Threading.CompressedStack System.Threading.Thread.GetCompressedStack() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0003 | +| System.Threading.CompressedStack System.Threading.Thread.GetCompressedStack() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | | System.Threading.Tasks.TplEventSource | [EventSourceAttribute(...)] | Guid | 2e5dba47-a3d2-4d16-8ee0-6671ffdcd7b5 | | System.Threading.Tasks.TplEventSource | [EventSourceAttribute(...)] | LocalizationResources | System.Private.CoreLib.Strings | | System.Threading.Tasks.TplEventSource | [EventSourceAttribute(...)] | Name | System.Threading.Tasks.TplEventSource | | System.TimeOnly System.TimeOnly.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.TimeOnly System.TimeOnly.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeOnly System.TimeOnly.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeOnly System.TimeOnly.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.TimeSpan System.DateTime.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.DateTime.op_Subtraction(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.TimeSpan System.DateTimeOffset.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.DateTimeOffset.op_Subtraction(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeOnly.op_Subtraction(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.TimeSpan System.TimeSpan.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.TimeSpan System.TimeSpan.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.TimeSpan System.TimeSpan.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.op_Addition(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.op_Division(System.TimeSpan,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.op_Multiply(System.TimeSpan,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.op_Subtraction(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.op_UnaryNegation(System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.TimeSpan System.TimeSpan.op_UnaryPlus(System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Linker doesn't recognize always throwing method. https://github.com/mono/linker/issues/2025 | +| System.Type System.Reflection.Emit.SymbolType.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Linker doesn't recognize always throwing method. https://github.com/mono/linker/issues/2025 | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Linker doesn't recognize always throwing method. https://github.com/mono/linker/issues/2025 | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.Substitute(System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The entire TypeBuilderInstantiation is serving the MakeGenericType implementation. Currently this is not supported by linker. Once it is supported the outercall (Type.MakeGenericType)will validate that the types fullfill the necessary requirements of annotations on type parameters.As such the actual internals of the implementation are not interesting. | +| System.Type System.Reflection.RuntimeExceptionHandlingClause.get_CatchType() | [UnconditionalSuppressMessageAttribute(...)] | Justification | Module.ResolveType is marked as RequiresUnreferencedCode because it relies on tokenswhich are not guaranteed to be stable across trimming. So if somebody hardcodes a token it could break.The usage here is not like that as all these tokens come from existing metadata loaded from some ILand so trimming has no effect (the tokens are read AFTER trimming occured). | +| System.Type System.Reflection.SignatureType.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Linker doesn't recognize always throwing method. https://github.com/mono/linker/issues/2025 | +| System.Type System.Reflection.SignatureTypeExtensions.TryResolve(System.Reflection.SignatureType,System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Used to find matching method overloads. Only used for assignability checks. | +| System.Type System.Resources.ResourceReader.FindType(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | UseReflectionToGetType will get trimmed out when AllowCustomResourceTypes is set to false. When set to true, we will already throw a warning for this feature switch, so we suppress this one in order forthe user to only get one error. | +| System.Type System.Type.GetEnumUnderlyingType() | [UnconditionalSuppressMessageAttribute(...)] | Justification | The single instance field on enum types is never trimmed | +| System.Type System.Type.ReflectionOnlyGetType(System.String,System.Boolean,System.Boolean) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0018 | +| System.Type System.Type.ReflectionOnlyGetType(System.String,System.Boolean,System.Boolean) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Type[] System.Reflection.TypeInfo.g__GetDeclaredOnlyNestedTypes\|22_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The yield return state machine doesn't propagate annotations | +| System.UInt16 System.UInt16.Abs(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Clamp(System.UInt16,System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.LeadingZeroCount(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Log2(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Max(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Min(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.PopCount(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.RotateLeft(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.RotateRight(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.Sign(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.TrailingZeroCount(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_Addition(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_BitwiseAnd(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_BitwiseOr(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_Decrement(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_Division(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_ExclusiveOr(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_Increment(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_LeftShift(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_Modulus(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_Multiply(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_OnesComplement(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_RightShift(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_Subtraction(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_UnaryNegation(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt16 System.UInt16.op_UnaryPlus(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Abs(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Clamp(System.UInt32,System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.LeadingZeroCount(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Log2(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Max(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Min(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.PopCount(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.RotateLeft(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.RotateRight(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.Sign(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.TrailingZeroCount(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_Addition(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_BitwiseAnd(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_BitwiseOr(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_Decrement(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_Division(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_ExclusiveOr(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_Increment(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_LeftShift(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_Modulus(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_Multiply(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_OnesComplement(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_RightShift(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_Subtraction(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_UnaryNegation(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt32 System.UInt32.op_UnaryPlus(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Abs(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Clamp(System.UInt64,System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.LeadingZeroCount(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Log2(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Max(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Min(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.PopCount(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.RotateLeft(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.RotateRight(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.Sign(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.TrailingZeroCount(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_Addition(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_BitwiseAnd(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_BitwiseOr(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_Decrement(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_Division(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_ExclusiveOr(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_Increment(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_LeftShift(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_Modulus(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_Multiply(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_OnesComplement(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_RightShift(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_Subtraction(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_UnaryNegation(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UInt64 System.UInt64.op_UnaryPlus(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Abs(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.UIntPtr System.UIntPtr.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Clamp(System.UIntPtr,System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.LeadingZeroCount(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Log2(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Max(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.UIntPtr System.UIntPtr.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Min(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.UIntPtr System.UIntPtr.MinValue | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.UIntPtr System.UIntPtr.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.UIntPtr System.UIntPtr.One | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.PopCount(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.RotateLeft(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.RotateRight(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.Sign(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.TrailingZeroCount(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | System.UIntPtr System.UIntPtr.Zero | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_Addition(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_BitwiseAnd(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_BitwiseOr(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_Decrement(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_Division(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_ExclusiveOr(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_Increment(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_LeftShift(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_Modulus(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_Multiply(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_OnesComplement(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_RightShift(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_Subtraction(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_UnaryNegation(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.UIntPtr System.UIntPtr.op_UnaryPlus(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Byte.DivRem(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Char.DivRem(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Decimal.DivRem(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Double.DivRem(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Half.DivRem(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Int16.DivRem(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Int32.DivRem(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Int64.DivRem(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.IntPtr.DivRem(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.SByte.DivRem(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.Single.DivRem(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.UInt16.DivRem(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.UInt32.DivRem(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.UInt64.DivRem(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.ValueTuple System.UIntPtr.DivRem(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | +| System.Void Internal.Runtime.InteropServices.IClassFactory.CreateInstance(System.Object,System.Guid,System.IntPtr) | [RequiresUnreferencedCodeAttribute(...)] | Url | https://aka.ms/dotnet-illink/com | +| System.Void Internal.Runtime.InteropServices.IsolatedComponentLoadContext..ctor(System.String) | [RequiresUnreferencedCodeAttribute(...)] | Url | https://aka.ms/dotnet-illink/nativehost | +| System.Void System.AppDomain.Unload(System.AppDomain) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0024 | +| System.Void System.AppDomain.Unload(System.AppDomain) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Buffers.ArrayPoolEventSource.BufferAllocated(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferAllocatedReason) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Buffers.ArrayPoolEventSource.BufferDropped(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferDroppedReason) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Buffers.ArrayPoolEventSource.BufferRented(System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The DynamicDependency will preserve the properties of CounterPayload | +| System.Void System.Diagnostics.Tracing.EventSource.Write(System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.Write(System.String,System.Diagnostics.Tracing.EventSourceOptions) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Byte[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Byte[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Int64,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.String,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventCore(System.Int32,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventVarargs(System.Int32,System.Guid*,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityId(System.Int32,System.Guid,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityIdCore(System.Int32,System.Guid*,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,!0) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,!0) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,System.Guid,System.Guid,!0) | [UnconditionalSuppressMessageAttribute(...)] | Justification | EnsureDescriptorsInitialized's use of GetType preserves this method which requires unreferenced code, but EnsureDescriptorsInitialized does not access this member and is safe to call. | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String,System.Boolean,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Diagnostics.Tracing.IncrementingEventCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The DynamicDependency will preserve the properties of IncrementingCounterPayload | +| System.Void System.Diagnostics.Tracing.IncrementingPollingCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The DynamicDependency will preserve the properties of IncrementingCounterPayload | +| System.Void System.Diagnostics.Tracing.NullableTypeInfo.WriteData(System.Diagnostics.Tracing.PropertyValue) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The underlying type of Nullable must be defaultable | +| System.Void System.Diagnostics.Tracing.PollingCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The DynamicDependency will preserve the properties of CounterPayload | +| System.Void System.Reflection.CustomAttribute.AddCustomAttributes(System.RuntimeType.ListBuilder,System.Reflection.RuntimeModule,System.Int32,System.RuntimeType,System.Boolean,System.RuntimeType.ListBuilder) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Linker guarantees presence of all the constructor parameters, property setters and fields which are accessed by any attribute instantiation which is present in the code linker has analyzed.As such the reflection usage in this method will never fail as those methods/fields will be present. | +| System.Void System.Reflection.Emit.EnumBuilder..ctor(System.String,System.Type,System.Reflection.TypeAttributes,System.Reflection.Emit.ModuleBuilder) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Reflection.Emit is not subject to trimming | +| System.Void System.Reflection.Metadata.RuntimeTypeMetadataUpdateHandler.ClearCache(System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Clearing the caches on a Type isn't affected if a Type is trimmed, or has any of its members trimmed. | +| System.Void System.Reflection.RuntimeCustomAttributeData..ctor(System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.Reflection.ConstArray) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Property setters and fields which are accessed by any attribute instantiation which is present in the code linker has analyzed.As such enumerating all fields and properties may return different results after trimmingbut all those which are needed to actually have data will be there. | +| System.Void System.Reflection.RuntimeCustomAttributeData..ctor(System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.Reflection.ConstArray) | [UnconditionalSuppressMessageAttribute(...)] | Justification | We're getting a MethodBase of a constructor that we found in the metadata. The attribute constructor won't be trimmed. | +| System.Void System.Reflection.RuntimeCustomAttributeData.Init(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | Justification | The pca object had to be created by the single ctor on the Type. So the ctor couldn't have been trimmed. | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(System.Runtime.CompilerServices.RuntimeHelpers.TryCode,System.Runtime.CompilerServices.RuntimeHelpers.CleanupCode,System.Object) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0004 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(System.Runtime.CompilerServices.RuntimeHelpers.TryCode,System.Runtime.CompilerServices.RuntimeHelpers.CleanupCode,System.Object) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareConstrainedRegions() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0004 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareConstrainedRegions() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareConstrainedRegionsNoOP() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0004 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareConstrainedRegionsNoOP() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareContractedDelegate(System.Delegate) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0004 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareContractedDelegate(System.Delegate) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.ProbeForSufficientStack() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0004 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.ProbeForSufficientStack() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Runtime.InteropServices.Marshal.PrelinkAll(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | Justification | This only needs to prelink methods that are actually used | +| System.Void System.Text.UTF7Encoding..ctor() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0001 | +| System.Void System.Text.UTF7Encoding..ctor() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Text.UTF7Encoding..ctor(System.Boolean) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0001 | +| System.Void System.Text.UTF7Encoding..ctor(System.Boolean) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Threading.Tasks.TplEventSource.AwaitTaskContinuationScheduled(System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Threading.Tasks.TplEventSource.SetActivityId(System.Guid) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Guid parameter is safe with WriteEvent | +| System.Void System.Threading.Tasks.TplEventSource.TaskCompleted(System.Int32,System.Int32,System.Int32,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Threading.Tasks.TplEventSource.TaskScheduled(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Threading.Tasks.TplEventSource.TaskWaitBegin(System.Int32,System.Int32,System.Int32,System.Threading.Tasks.TplEventSource.TaskWaitBehavior,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Threading.Tasks.TplEventSource.TraceOperationBegin(System.Int32,System.String,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Threading.Tasks.TplEventSource.TraceSynchronousWorkEnd(System.Threading.Tasks.CausalitySynchronousWork) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Parameters to this method are primitive and are trimmer safe | +| System.Void System.Threading.Thread.Abort() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0006 | +| System.Void System.Threading.Thread.Abort() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Threading.Thread.Abort(System.Object) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0006 | +| System.Void System.Threading.Thread.Abort(System.Object) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Threading.Thread.ResetAbort() | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0006 | +| System.Void System.Threading.Thread.ResetAbort() | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Threading.Thread.SetCompressedStack(System.Threading.CompressedStack) | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0003 | +| System.Void System.Threading.Thread.SetCompressedStack(System.Threading.CompressedStack) | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | +| System.Void System.Type.GetEnumData(System.String[],System.Array) | [UnconditionalSuppressMessageAttribute(...)] | Justification | Literal fields on enums can never be trimmed | | bool System.Reflection.Assembly.GlobalAssemblyCache | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0005 | | bool System.Reflection.Assembly.GlobalAssemblyCache | [ObsoleteAttribute(...)] | UrlFormat | https://aka.ms/dotnet-warnings/{0} | | bool System.Reflection.RuntimeAssembly.GlobalAssemblyCache | [ObsoleteAttribute(...)] | DiagnosticId | SYSLIB0005 | @@ -1407,34 +5032,125 @@ attrArgNamed | ushort ushort.One | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | | ushort ushort.Zero | [RequiresPreviewFeaturesAttribute(...)] | Url | https://aka.ms/dotnet-warnings/generic-math-preview | attrArgPositional +| !0 | [NotNullIfNotNullAttribute(...)] | 0 | location | +| !0 | [NotNullIfNotNullAttribute(...)] | 0 | value | +| !0 | [NullableAttribute(...)] | 0 | 1 | +| !0 | [NullableAttribute(...)] | 0 | 2 | +| !0 Internal.Runtime.CompilerServices.Unsafe.AsRef`1(System.Void*) | [NullableContextAttribute(...)] | 0 | 0 | +| !0 Internal.Runtime.CompilerServices.Unsafe.As`1(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| !0 Internal.Runtime.CompilerServices.Unsafe.ReadUnaligned`1(System.Void*) | [NullableContextAttribute(...)] | 0 | 0 | +| !0 Internal.Runtime.CompilerServices.Unsafe.Read`1(System.Void*) | [NullableContextAttribute(...)] | 0 | 0 | | !0 System.ArraySegment`1.Enumerator.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.ArraySegment`1.Enumerator.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Collections.Generic.Dictionary`2.KeyCollection.Enumerator.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Collections.Generic.Dictionary`2.KeyCollection.Enumerator.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Collections.Generic.HashSet`1.Enumerator.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Collections.Generic.HashSet`1.Enumerator.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Collections.Generic.IAsyncEnumerator`1.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Collections.Generic.IAsyncEnumerator`1.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Collections.Generic.IEnumerator`1.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Collections.Generic.IEnumerator`1.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Collections.Generic.List`1.Enumerator.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Collections.Generic.List`1.Enumerator.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Collections.Generic.Queue`1.Enumerator.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Collections.Generic.Queue`1.Enumerator.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Double.ILogB`1(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| !0 System.Enum.Parse`1(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| !0 System.Enum.Parse`1(System.ReadOnlySpan,System.Boolean) | [NullableContextAttribute(...)] | 0 | 0 | +| !0 System.Enum.Parse`1(System.String) | [NullableContextAttribute(...)] | 0 | 0 | +| !0 System.Enum.Parse`1(System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 0 | +| !0 System.Func`1.Invoke() | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Half.ILogB`1(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| !0 System.IBinaryNumber`1.Log2(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.INumber`1.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 0 | +| !0 System.IO.Enumeration.FileSystemEnumerable`1.FindTransform.Invoke(System.IO.Enumeration.FileSystemEntry) | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.IO.Enumeration.FileSystemEnumerator`1.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.IO.Enumeration.FileSystemEnumerator`1.TransformEntry(System.IO.Enumeration.FileSystemEntry) | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.IO.Enumeration.FileSystemEnumerator`1.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.ISignedNumber`1.NegativeOne | [NullableAttribute(...)] | 0 | 1 | +| !0 System.ISignedNumber`1.get_NegativeOne() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Lazy`1.Value | [DebuggerBrowsableAttribute(...)] | 0 | 0 | | !0 System.Lazy`1.ValueForDebugDisplay | [NullableAttribute(...)] | 0 | 2 | +| !0 System.ReadOnlySpan`1.GetPinnableReference() | [EditorBrowsableAttribute(...)] | 0 | 1 | | !0 System.Runtime.CompilerServices.ConfiguredCancelableAsyncEnumerable`1.Enumerator.Current | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Runtime.CompilerServices.ConfiguredCancelableAsyncEnumerable`1.Enumerator.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.GetResult() | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.CompilerServices.ConfiguredValueTaskAwaitable`1.ConfiguredValueTaskAwaiter.GetResult() | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.CompilerServices.ValueTaskAwaiter`1.GetResult() | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.InteropServices.ComWrappers.ComInterfaceDispatch.GetInstance`1(System.Runtime.InteropServices.ComWrappers.ComInterfaceDispatch*) | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.InteropServices.Marshal.GetObjectForNativeVariant`1(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| !0 System.Runtime.InteropServices.Marshal.GetObjectForNativeVariant`1(System.IntPtr) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| !0 System.Runtime.InteropServices.Marshal.PtrToStructure`1(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| !0 System.Runtime.InteropServices.MemoryMarshal.GetArrayDataReference`1(!0[]) | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.InteropServices.MemoryMarshal.GetReference`1(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.InteropServices.MemoryMarshal.GetReference`1(System.Span) | [NullableContextAttribute(...)] | 0 | 1 | +| !0 System.Runtime.InteropServices.SafeBuffer.Read`1(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| !0 System.Single.ILogB`1(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| !0 System.Span`1.GetPinnableReference() | [EditorBrowsableAttribute(...)] | 0 | 1 | +| !0 System.Threading.Tasks.Sources.IValueTaskSource`1.GetResult(System.Int16) | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Threading.Tasks.Task`1.Result | [DebuggerBrowsableAttribute(...)] | 0 | 0 | | !0 System.Threading.Tasks.ValueTask`1.Result | [DebuggerBrowsableAttribute(...)] | 0 | 0 | | !0 System.Threading.ThreadLocal`1.Value | [DebuggerBrowsableAttribute(...)] | 0 | 0 | | !0 System.Threading.ThreadLocal`1.ValueForDebugDisplay | [NullableAttribute(...)] | 0 | 2 | | !0 System.Tuple`1.Item1 | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Tuple`1.get_Item1() | [NullableContextAttribute(...)] | 0 | 1 | | !0 System.Tuple`2.Item1 | [NullableAttribute(...)] | 0 | 1 | +| !0 System.Tuple`2.get_Item1() | [NullableContextAttribute(...)] | 0 | 1 | +| !0[] | [NullableAttribute(...)] | 0 | 1 | +| !0[] | [NullableAttribute(...)] | 0 | [1,0] | +| !0[] | [NullableAttribute(...)] | 0 | [2,1] | | !0[] System.ArraySegment`1.Array | [NullableAttribute(...)] | 0 | [2,1] | | !0[] System.Collections.Concurrent.IProducerConsumerCollectionDebugView`1.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | | !0[] System.Collections.Generic.DictionaryKeyCollectionDebugView`2.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | | !0[] System.Collections.Generic.ICollectionDebugView`1.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | | !0[] System.Collections.Generic.QueueDebugView`1.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | +| !0[] System.Enum.GetValues`1() | [NullableContextAttribute(...)] | 0 | 0 | | !0[] System.MemoryDebugView`1.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | +| !0[] System.Runtime.InteropServices.Marshal.GetObjectsForNativeVariants`1(System.IntPtr,System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | | !0[] System.SpanDebugView`1.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | +| !1 | [NullableAttribute(...)] | 0 | 1 | | !1 System.Collections.Generic.Dictionary`2.ValueCollection.Enumerator.Current | [NullableAttribute(...)] | 0 | 1 | +| !1 System.Collections.Generic.Dictionary`2.ValueCollection.Enumerator.get_Current() | [NullableContextAttribute(...)] | 0 | 1 | +| !1 System.Converter`2.Invoke(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| !1 System.Func`2.Invoke(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| !1 System.Runtime.CompilerServices.ConditionalWeakTable`2.CreateValueCallback.Invoke(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| !1 System.Runtime.InteropServices.Marshal.CreateWrapperOfType`2(!0) | [NullableContextAttribute(...)] | 0 | 2 | +| !1 System.Runtime.InteropServices.Marshal.CreateWrapperOfType`2(!0) | [SupportedOSPlatformAttribute(...)] | 0 | windows | | !1 System.Tuple`2.Item2 | [NullableAttribute(...)] | 0 | 1 | +| !1 System.Tuple`2.get_Item2() | [NullableContextAttribute(...)] | 0 | 1 | +| !1[] | [NullableAttribute(...)] | 0 | [2,1] | | !1[] System.Collections.Generic.DictionaryValueCollectionDebugView`2.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | +| !2 | [NullableAttribute(...)] | 0 | 1 | +| !2 System.Func`3.Invoke(!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| !3 System.Func`4.Invoke(!0,!1,!2) | [NullableContextAttribute(...)] | 0 | 1 | +| !4 System.Func`5.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !4 System.Func`5.Invoke(!0,!1,!2,!3) | [NullableContextAttribute(...)] | 0 | 1 | +| !5 System.Func`6.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !5 System.Func`6.Invoke(!0,!1,!2,!3,!4) | [NullableContextAttribute(...)] | 0 | 1 | +| !6 System.Func`7.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !6 System.Func`7.Invoke(!0,!1,!2,!3,!4,!5) | [NullableContextAttribute(...)] | 0 | 1 | +| !7 | [NullableAttribute(...)] | 0 | 0 | +| !7 System.Func`8.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !7 System.Func`8.Invoke(!0,!1,!2,!3,!4,!5,!6) | [NullableContextAttribute(...)] | 0 | 1 | +| !8 System.Func`9.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !8 System.Func`9.Invoke(!0,!1,!2,!3,!4,!5,!6,!7) | [NullableContextAttribute(...)] | 0 | 1 | +| !9 System.Func`10.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !9 System.Func`10.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8) | [NullableContextAttribute(...)] | 0 | 1 | +| !10 System.Func`11.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !10 System.Func`11.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9) | [NullableContextAttribute(...)] | 0 | 1 | +| !11 System.Func`12.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !11 System.Func`12.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10) | [NullableContextAttribute(...)] | 0 | 1 | +| !12 System.Func`13.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !12 System.Func`13.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11) | [NullableContextAttribute(...)] | 0 | 1 | +| !13 System.Func`14.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !13 System.Func`14.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12) | [NullableContextAttribute(...)] | 0 | 1 | +| !14 System.Func`15.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !14 System.Func`15.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13) | [NullableContextAttribute(...)] | 0 | 1 | +| !15 System.Func`16.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !15 System.Func`16.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14) | [NullableContextAttribute(...)] | 0 | 1 | +| !16 System.Func`17.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| !16 System.Func`17.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15) | [NullableContextAttribute(...)] | 0 | 1 | | Internal.Runtime.CompilerServices.Unsafe | [CLSCompliantAttribute(...)] | 0 | False | | Internal.Runtime.CompilerServices.Unsafe | [NullableAttribute(...)] | 0 | 0 | | Internal.Runtime.CompilerServices.Unsafe | [NullableContextAttribute(...)] | 0 | 1 | @@ -1445,13 +5161,22 @@ attrArgPositional | Internal.Runtime.InteropServices.IClassFactory | [GuidAttribute(...)] | 0 | 00000001-0000-0000-C000-000000000046 | | Internal.Runtime.InteropServices.IClassFactory | [InterfaceTypeAttribute(...)] | 0 | 1 | | Internal.Runtime.InteropServices.IClassFactory | [NullableContextAttribute(...)] | 0 | 2 | +| Internal.Runtime.InteropServices.IsolatedComponentLoadContext Internal.Runtime.InteropServices.ComponentActivator.GetIsolatedComponentLoadContext(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Native hosting is not trim compatible and this warning will be seen if trimming is enabled. | | Interop.Sys.MountPointFound | [UnmanagedFunctionPointerAttribute(...)] | 0 | 2 | | Microsoft.Win32.SafeHandles.SafeFileHandle | [NullableAttribute(...)] | 0 | 0 | +| Microsoft.Win32.SafeHandles.SafeFileHandle | [NullableAttribute(...)] | 0 | 1 | | Microsoft.Win32.SafeHandles.SafeFileHandle | [NullableContextAttribute(...)] | 0 | 2 | +| Microsoft.Win32.SafeHandles.SafeWaitHandle | [NullableAttribute(...)] | 0 | 2 | | Microsoft.Win32.SafeHandles.SafeWaitHandle System.Threading.RegisteredWaitHandle.UserUnregisterWaitHandle | [NullableAttribute(...)] | 0 | 2 | | System.AccessViolationException | [NullableAttribute(...)] | 0 | 0 | | System.AccessViolationException | [NullableContextAttribute(...)] | 0 | 2 | | System.AccessViolationException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Action | [NullableAttribute(...)] | 0 | [1,2] | +| System.Action> | [NullableAttribute(...)] | 0 | [1,1,1,2] | +| System.Action | [NullableAttribute(...)] | 0 | [1,1,2] | +| System.Action | [NullableAttribute(...)] | 0 | [1,2] | +| System.Action | [NullableAttribute(...)] | 0 | [2,1] | +| System.Action> | [NullableAttribute(...)] | 0 | [2,0,1] | | System.Action`4 | [NullableAttribute(...)] | 0 | 0 | | System.Action`4 | [NullableContextAttribute(...)] | 0 | 2 | | System.Action`5 | [NullableAttribute(...)] | 0 | 0 | @@ -1485,11 +5210,13 @@ attrArgPositional | System.AggregateException | [NullableContextAttribute(...)] | 0 | 1 | | System.AggregateException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.AggregateException System.Threading.Tasks.Task.Exception | [NullableAttribute(...)] | 0 | 2 | +| System.AggregateException System.Threading.Tasks.Task.get_Exception() | [NullableContextAttribute(...)] | 0 | 2 | | System.AppContext | [NullableAttribute(...)] | 0 | 0 | | System.AppContext | [NullableContextAttribute(...)] | 0 | 2 | | System.AppContext.FirstChanceException | [NullableAttribute(...)] | 0 | [2,1] | | System.AppDomain | [NullableAttribute(...)] | 0 | 0 | | System.AppDomain | [NullableContextAttribute(...)] | 0 | 1 | +| System.AppDomain System.AppDomain.CreateDomain(System.String) | [ObsoleteAttribute(...)] | 0 | Creating and unloading AppDomains is not supported and throws an exception. | | System.AppDomain.AssemblyLoad | [NullableAttribute(...)] | 0 | 2 | | System.AppDomain.AssemblyResolve | [NullableAttribute(...)] | 0 | 2 | | System.AppDomain.DomainUnload | [NullableAttribute(...)] | 0 | 2 | @@ -1522,9 +5249,13 @@ attrArgPositional | System.ArithmeticException | [NullableContextAttribute(...)] | 0 | 2 | | System.ArithmeticException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Array | [NullableAttribute(...)] | 0 | 0 | +| System.Array | [NullableAttribute(...)] | 0 | 1 | +| System.Array | [NullableAttribute(...)] | 0 | 2 | | System.Array | [NullableContextAttribute(...)] | 0 | 1 | | System.Array | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.ArraySegment | [NullableAttribute(...)] | 0 | [0,1] | | System.ArraySegment System.ArraySegment`1.Empty | [NullableAttribute(...)] | 0 | [0,1] | +| System.ArraySegment.Enumerator System.ArraySegment`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 0 | | System.ArraySegment`1 | [DefaultMemberAttribute(...)] | 0 | Item | | System.ArraySegment`1 | [NullableAttribute(...)] | 0 | 0 | | System.ArraySegment`1 | [NullableContextAttribute(...)] | 0 | 1 | @@ -1534,28 +5265,808 @@ attrArgPositional | System.ArrayTypeMismatchException | [NullableContextAttribute(...)] | 0 | 2 | | System.ArrayTypeMismatchException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.AssemblyLoadEventArgs | [NullableAttribute(...)] | 0 | 0 | +| System.AssemblyLoadEventArgs | [NullableAttribute(...)] | 0 | 1 | | System.AssemblyLoadEventArgs | [NullableContextAttribute(...)] | 0 | 1 | +| System.AsyncCallback | [NullableAttribute(...)] | 0 | 0 | +| System.AsyncCallback | [NullableAttribute(...)] | 0 | 2 | | System.Attribute | [AttributeUsageAttribute(...)] | 0 | 32767 | | System.Attribute | [NullableAttribute(...)] | 0 | 0 | | System.Attribute | [NullableContextAttribute(...)] | 0 | 1 | | System.Attribute | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Attribute System.Diagnostics.Tracing.EventSource.GetCustomAttributeHelper(System.Reflection.MemberInfo,System.Type,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Attribute System.Diagnostics.Tracing.EventSource.GetCustomAttributeHelper(System.Reflection.MemberInfo,System.Type,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2114:ReflectionToDynamicallyAccessedMembers | | System.AttributeUsageAttribute | [AttributeUsageAttribute(...)] | 0 | 4 | +| System.AttributeUsageAttribute System.Reflection.CustomAttribute.GetAttributeUsage(System.RuntimeType) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.AttributeUsageAttribute System.Reflection.CustomAttribute.GetAttributeUsage(System.RuntimeType) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | | System.BadImageFormatException | [NullableAttribute(...)] | 0 | 0 | | System.BadImageFormatException | [NullableContextAttribute(...)] | 0 | 2 | | System.BadImageFormatException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.BitConverter | [NullableAttribute(...)] | 0 | 0 | | System.BitConverter | [NullableContextAttribute(...)] | 0 | 1 | | System.BitConverter.<>c.<>9__43_0 | [TupleElementNamesAttribute(...)] | 0 | [value,startIndex,length] | +| System.Boolean System.AppContext.TryGetSwitch(System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.ApplicationId.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ArgIterator.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ArraySegment`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Attribute.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Attribute.Equals(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Boolean System.Attribute.Equals(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Boolean System.Attribute.Match(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.BitConverter.ToBoolean(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Boolean) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Char) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Double) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Half) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Int16) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Int64) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.Single) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.UInt16) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.UInt32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.BitConverter.TryWriteBytes(System.Span,System.UInt64) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Boolean.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Boolean.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Boolean.TryParse(System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryReadUInt16BigEndian(System.ReadOnlySpan,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryReadUInt16LittleEndian(System.ReadOnlySpan,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryReadUInt32BigEndian(System.ReadOnlySpan,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryReadUInt32LittleEndian(System.ReadOnlySpan,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryReadUInt64BigEndian(System.ReadOnlySpan,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryReadUInt64LittleEndian(System.ReadOnlySpan,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryWriteUInt16BigEndian(System.Span,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryWriteUInt16LittleEndian(System.Span,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryWriteUInt32BigEndian(System.Span,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryWriteUInt32LittleEndian(System.Span,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryWriteUInt64BigEndian(System.Span,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Binary.BinaryPrimitives.TryWriteUInt64LittleEndian(System.Span,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.StandardFormat.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Buffers.Text.Utf8Formatter.TryFormat(System.SByte,System.Span,System.Int32,System.Buffers.StandardFormat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Text.Utf8Formatter.TryFormat(System.UInt16,System.Span,System.Int32,System.Buffers.StandardFormat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Text.Utf8Formatter.TryFormat(System.UInt32,System.Span,System.Int32,System.Buffers.StandardFormat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Text.Utf8Formatter.TryFormat(System.UInt64,System.Span,System.Int32,System.Buffers.StandardFormat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Text.Utf8Parser.TryParse(System.ReadOnlySpan,System.SByte,System.Int32,System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Text.Utf8Parser.TryParse(System.ReadOnlySpan,System.UInt16,System.Int32,System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Text.Utf8Parser.TryParse(System.ReadOnlySpan,System.UInt32,System.Int32,System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Buffers.Text.Utf8Parser.TryParse(System.ReadOnlySpan,System.UInt64,System.Int32,System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Byte.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Byte.IsPow2(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.TryCreate`1(!0,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.TryParse(System.String,System.Byte) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Byte.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Byte) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Byte.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.TryParse(System.String,System.IFormatProvider,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.op_Equality(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.op_GreaterThan(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.op_GreaterThanOrEqual(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.op_Inequality(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.op_LessThan(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Byte.op_LessThanOrEqual(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Char.IsControl(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsDigit(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsHighSurrogate(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsLetter(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsLetterOrDigit(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsLowSurrogate(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsLower(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsNumber(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsPow2(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.IsPunctuation(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsSeparator(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsSurrogate(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsSurrogatePair(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsSymbol(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsUpper(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.IsWhiteSpace(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Char.TryCreate`1(!0,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.TryParse(System.String,System.Char) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Char.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.TryParse(System.String,System.IFormatProvider,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.op_Equality(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.op_GreaterThan(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.op_GreaterThanOrEqual(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.op_Inequality(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.op_LessThan(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Char.op_LessThanOrEqual(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Collections.ArrayList.Contains(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.ByteEqualityComparer.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.EnumEqualityComparer`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.EqualityComparer`1.Equals(!0,!0) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.GenericEqualityComparer`1.Equals(!0,!0) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.GenericEqualityComparer`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.NonRandomizedStringEqualityComparer.Equals(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.NullableComparer`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.NullableEqualityComparer`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Generic.ReferenceEqualityComparer.Equals(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.Hashtable.ContainsValue(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Collections.IEqualityComparer.Equals(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ComponentModel.DefaultValueAttribute.ctor>g__TryConvertFromInvariantString\|2_0(System.Type,System.String,System.Object) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Generic TypeConverters may require the generic types to be annotated. For example, NullableConverter requires the underlying type to be DynamicallyAccessedMembers All. | +| System.Boolean System.ComponentModel.EditorBrowsableAttribute.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Console.get_CursorVisible() | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Boolean System.ConsoleKeyInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Convert.ToBoolean(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Convert.ToBoolean(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Convert.ToBoolean(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Convert.ToBoolean(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Convert.TryFromBase64Chars(System.ReadOnlySpan,System.Span,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Convert.TryFromBase64String(System.String,System.Span,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Convert.TryToBase64Chars(System.ReadOnlySpan,System.Span,System.Int32,System.Base64FormattingOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.DateOnly.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateOnly.TryParse(System.String,System.DateOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.TryParse(System.String,System.IFormatProvider,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateOnly.TryParse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.TryParseExact(System.ReadOnlySpan,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.TryParseExact(System.String,System.String,System.DateOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.TryParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.TryParseExact(System.String,System.String[],System.DateOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.TryParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateOnly.op_Equality(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateOnly.op_GreaterThan(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateOnly.op_GreaterThanOrEqual(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateOnly.op_Inequality(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateOnly.op_LessThan(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateOnly.op_LessThanOrEqual(System.DateOnly,System.DateOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTime.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.TryParse(System.String,System.DateTime) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTime.TryParse(System.String,System.IFormatProvider,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.TryParse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTime) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTime.TryParseExact(System.ReadOnlySpan,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTime) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTime.TryParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTime) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTime.TryParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTime) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTime.op_Equality(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.op_GreaterThan(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.op_GreaterThanOrEqual(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.op_Inequality(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.op_LessThan(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTime.op_LessThanOrEqual(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTimeOffset.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.TryParse(System.String,System.DateTimeOffset) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTimeOffset.TryParse(System.String,System.IFormatProvider,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.TryParse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTimeOffset) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTimeOffset.TryParseExact(System.ReadOnlySpan,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTimeOffset) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTimeOffset.TryParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTimeOffset) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTimeOffset.TryParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.DateTimeOffset) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.DateTimeOffset.op_Equality(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.op_GreaterThan(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.op_GreaterThanOrEqual(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.op_Inequality(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.op_LessThan(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.DateTimeOffset.op_LessThanOrEqual(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Decimal.TryCreate`1(!0,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.TryParse(System.String,System.Decimal) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Decimal.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Decimal) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Decimal.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.TryParse(System.String,System.IFormatProvider,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.op_Equality(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.op_GreaterThan(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.op_GreaterThanOrEqual(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.op_Inequality(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.op_LessThan(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Decimal.op_LessThanOrEqual(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Delegate.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Delegate.op_Equality(System.Delegate,System.Delegate) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Delegate.op_Inequality(System.Delegate,System.Delegate) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Double.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Double.IsFinite(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsInfinity(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsNaN(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsNegative(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsNegativeInfinity(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsNormal(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsPositiveInfinity(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsPow2(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.IsSubnormal(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.TryCreate`1(!0,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.TryParse(System.String,System.Double) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Double.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Double) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Double.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.TryParse(System.String,System.IFormatProvider,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.op_Equality(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.op_GreaterThan(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.op_GreaterThanOrEqual(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.op_Inequality(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.op_LessThan(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Double.op_LessThanOrEqual(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Enum.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Enum.IsDefined`1(!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Enum.TryParse(System.Type,System.ReadOnlySpan,System.Boolean,System.Object) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Enum.TryParse(System.Type,System.ReadOnlySpan,System.Object) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Enum.TryParse(System.Type,System.String,System.Boolean,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Enum.TryParse(System.Type,System.String,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Enum.TryParse`1(System.ReadOnlySpan,!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Enum.TryParse`1(System.ReadOnlySpan,System.Boolean,!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Enum.TryParse`1(System.String,!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Enum.TryParse`1(System.String,System.Boolean,!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Globalization.CompareInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Globalization.CompareInfo.IsPrefix(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Globalization.CompareInfo.IsPrefix(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Globalization.CompareInfo.IsSortable(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Globalization.CompareInfo.IsSuffix(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Globalization.CompareInfo.IsSuffix(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Globalization.CultureInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Globalization.IdnMapping.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Globalization.RegionInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Globalization.SortKey.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Globalization.StringInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Globalization.TextInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Guid.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Guid.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Guid.TryParse(System.String,System.Guid) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Guid.TryParse(System.String,System.IFormatProvider,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Guid.TryParseExact(System.String,System.String,System.Guid) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Guid.op_Equality(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Guid.op_GreaterThan(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Guid.op_GreaterThanOrEqual(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Guid.op_Inequality(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Guid.op_LessThan(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Guid.op_LessThanOrEqual(System.Guid,System.Guid) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Half.IsFinite(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsInfinity(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsNaN(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsNegative(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsNegativeInfinity(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsNormal(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsPositiveInfinity(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsPow2(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.IsSubnormal(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.TryCreate`1(!0,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Half) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Half.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.TryParse(System.String,System.Half) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Half.TryParse(System.String,System.IFormatProvider,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.op_Equality(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.op_GreaterThan(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.op_GreaterThanOrEqual(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.op_Inequality(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.op_LessThan(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Half.op_LessThanOrEqual(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.HashCode.Equals(System.Object) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Boolean System.HashCode.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.HashCode.Equals(System.Object) | [ObsoleteAttribute(...)] | 0 | HashCode is a mutable struct and should not be compared with other HashCodes. | +| System.Boolean System.HashCode.Equals(System.Object) | [ObsoleteAttribute(...)] | 1 | True | +| System.Boolean System.IBinaryNumber`1.IsPow2(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.INumber`1.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.INumber`1.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,!0) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IO.Directory.Exists(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IO.File.Exists(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IO.MemoryStream.TryGetBuffer(System.ArraySegment) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.IO.Path.EndsInDirectorySeparator(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.IO.Path.HasExtension(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.IO.Path.HasExtension(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IO.Path.IsPathFullyQualified(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.IO.Path.IsPathRooted(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.IO.Path.IsPathRooted(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IO.Path.TryJoin(System.ReadOnlySpan,System.ReadOnlySpan,System.ReadOnlySpan,System.Span,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.IO.Path.TryJoin(System.ReadOnlySpan,System.ReadOnlySpan,System.Span,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.IParseable`1.TryParse(System.String,System.IFormatProvider,!0) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Index.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int16.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int16.IsPow2(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.TryCreate`1(!0,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int16) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int16.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.TryParse(System.String,System.IFormatProvider,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.TryParse(System.String,System.Int16) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int16.op_Equality(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.op_GreaterThan(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.op_GreaterThanOrEqual(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.op_Inequality(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.op_LessThan(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int16.op_LessThanOrEqual(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int32.IsPow2(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.TryCreate`1(!0,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int32.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.TryParse(System.String,System.IFormatProvider,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.TryParse(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int32.op_Equality(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.op_GreaterThan(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.op_GreaterThanOrEqual(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.op_Inequality(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.op_LessThan(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int32.op_LessThanOrEqual(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int64.IsPow2(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.TryCreate`1(!0,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int64.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.TryParse(System.String,System.IFormatProvider,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.TryParse(System.String,System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Int64.op_Equality(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.op_GreaterThan(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.op_GreaterThanOrEqual(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.op_Inequality(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.op_LessThan(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Int64.op_LessThanOrEqual(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IntPtr.IsPow2(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.TryCreate`1(!0,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IntPtr.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.TryParse(System.String,System.IFormatProvider,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.TryParse(System.String,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.IntPtr.op_Equality(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.op_GreaterThan(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.op_GreaterThanOrEqual(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.op_Inequality(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.op_LessThan(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.IntPtr.op_LessThanOrEqual(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.MemoryExtensions.Contains`1(System.ReadOnlySpan,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.MemoryExtensions.Contains`1(System.Span,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.ReadOnlySpan,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.ReadOnlySpan,System.ReadOnlySpan,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.Span,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.Overlaps`1(System.Span,System.ReadOnlySpan,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.SequenceEqual`1(System.ReadOnlySpan,System.ReadOnlySpan,System.Collections.Generic.IEqualityComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.SequenceEqual`1(System.Span,System.ReadOnlySpan,System.Collections.Generic.IEqualityComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendFormatted(System.Object,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendFormatted(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendFormatted(System.String,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendFormatted`1(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendFormatted`1(!0,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendFormatted`1(!0,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendFormatted`1(!0,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MemoryExtensions.TryWriteInterpolatedStringHandler.AppendLiteral(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Memory`1.Equals(System.Object) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Boolean System.Memory`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MulticastDelegate.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MulticastDelegate.op_Equality(System.MulticastDelegate,System.MulticastDelegate) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.MulticastDelegate.op_Inequality(System.MulticastDelegate,System.MulticastDelegate) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Nullable`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.BitOperations.IsPow2(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Numerics.BitOperations.IsPow2(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Numerics.Matrix3x2.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.Matrix4x4.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.Plane.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.Quaternion.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.Vector2.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.Vector3.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.Vector4.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Numerics.Vector`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.OperatingSystem.IsIOS() | [SupportedOSPlatformGuardAttribute(...)] | 0 | maccatalyst | +| System.Boolean System.OperatingSystem.IsIOSVersionAtLeast(System.Int32,System.Int32,System.Int32) | [SupportedOSPlatformGuardAttribute(...)] | 0 | maccatalyst | +| System.Boolean System.Predicate`1.Invoke(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Range.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ReadOnlyMemory`1.Equals(System.Object) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Boolean System.ReadOnlyMemory`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ReadOnlySpan`1.Equals(System.Object) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Boolean System.ReadOnlySpan`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ReadOnlySpan`1.Equals(System.Object) | [ObsoleteAttribute(...)] | 0 | Equals() on ReadOnlySpan has will always throw an exception. Use the equality operator instead. | +| System.Boolean System.Reflection.Assembly.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Assembly.op_Equality(System.Reflection.Assembly,System.Reflection.Assembly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Assembly.op_Inequality(System.Reflection.Assembly,System.Reflection.Assembly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.CustomAttribute.FilterCustomAttributeRecord(System.Reflection.MetadataToken,System.Reflection.MetadataImport,System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.RuntimeType,System.Boolean,System.RuntimeType.ListBuilder,System.RuntimeType,System.IRuntimeMethodInfo,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Boolean System.Reflection.CustomAttribute.FilterCustomAttributeRecord(System.Reflection.MetadataToken,System.Reflection.MetadataImport,System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.RuntimeType,System.Boolean,System.RuntimeType.ListBuilder,System.RuntimeType,System.IRuntimeMethodInfo,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Boolean System.Reflection.CustomAttributeData.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.CustomAttributeNamedArgument.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.CustomAttributeTypedArgument.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.AssemblyBuilder.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.EnumBuilder.IsAssignableFrom(System.Reflection.TypeInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.GenericTypeParameterBuilder.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.GenericTypeParameterBuilder.IsAssignableFrom(System.Reflection.TypeInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.GenericTypeParameterBuilder.IsAssignableFrom(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.Label.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.MethodBuilder.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.ModuleBuilder.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.SignatureHelper.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.TypeBuilder.IsAssignableFrom(System.Reflection.TypeInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.TypeBuilder.IsAssignableFrom(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Emit.TypeBuilder.IsAssignableFrom(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Boolean System.Reflection.Emit.TypeBuilder.IsAssignableFrom(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | +| System.Boolean System.Reflection.MemberFilter.Invoke(System.Reflection.MemberInfo,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Reflection.MemberInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.MemberInfo.op_Equality(System.Reflection.MemberInfo,System.Reflection.MemberInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.MemberInfo.op_Inequality(System.Reflection.MemberInfo,System.Reflection.MemberInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Metadata.AssemblyExtensions.TryGetRawMetadata(System.Reflection.Assembly,System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Reflection.MethodInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.MethodInfo.op_Equality(System.Reflection.MethodInfo,System.Reflection.MethodInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.MethodInfo.op_Inequality(System.Reflection.MethodInfo,System.Reflection.MethodInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Module.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Module.op_Equality(System.Reflection.Module,System.Reflection.Module) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Module.op_Inequality(System.Reflection.Module,System.Reflection.Module) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.Pointer.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.TypeDelegator.IsAssignableFrom(System.Reflection.TypeInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Reflection.TypeFilter.Invoke(System.Type,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Reflection.TypeInfo.IsAssignableFrom(System.Reflection.TypeInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Resources.ResourceReader.InitializeBinaryFormatter() | [RequiresUnreferencedCodeAttribute(...)] | 0 | The CustomResourceTypesSupport feature switch has been enabled for this app which is being trimmed. Custom readers as well as custom objects on the resources file are not observable by the trimmer and so required assemblies, types and members may be removed. | +| System.Boolean System.Runtime.CompilerServices.RuntimeHelpers.Equals(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.CompilerServices.RuntimeHelpers.IsReferenceOrContainsReferences`1() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.CLong.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.CULong.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.Marshal.SetComObjectData(System.Object,System.Object,System.Object) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Boolean System.Runtime.InteropServices.MemoryMarshal.TryGetArray`1(System.ReadOnlyMemory,System.ArraySegment) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.MemoryMarshal.TryGetMemoryManager`2(System.ReadOnlyMemory,!1) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.MemoryMarshal.TryGetMemoryManager`2(System.ReadOnlyMemory,!1,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.NFloat.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.NFloat.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Runtime.InteropServices.NFloat) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.InteropServices.NFloat.TryParse(System.String,System.Runtime.InteropServices.NFloat) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.Intrinsics.Vector64`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.Intrinsics.Vector128`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.Intrinsics.Vector256`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.Versioning.FrameworkName.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.Versioning.FrameworkName.Equals(System.Runtime.Versioning.FrameworkName) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.Versioning.FrameworkName.op_Equality(System.Runtime.Versioning.FrameworkName,System.Runtime.Versioning.FrameworkName) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Runtime.Versioning.FrameworkName.op_Inequality(System.Runtime.Versioning.FrameworkName,System.Runtime.Versioning.FrameworkName) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.RuntimeFieldHandle.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.RuntimeMethodHandle.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.SByte.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.SByte.IsPow2(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.TryCreate`1(!0,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.SByte) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.SByte.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.TryParse(System.String,System.IFormatProvider,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.TryParse(System.String,System.SByte) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.SByte.op_Equality(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.op_GreaterThan(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.op_GreaterThanOrEqual(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.op_Inequality(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.op_LessThan(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.SByte.op_LessThanOrEqual(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Security.Principal.IPrincipal.IsInRole(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Single.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Single.IsFinite(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsInfinity(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsNaN(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsNegative(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsNegativeInfinity(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsNormal(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsPositiveInfinity(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsPow2(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.IsSubnormal(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.TryCreate`1(!0,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Single) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Single.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.TryParse(System.String,System.IFormatProvider,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.TryParse(System.String,System.Single) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Single.op_Equality(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.op_GreaterThan(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.op_GreaterThanOrEqual(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.op_Inequality(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.op_LessThan(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Single.op_LessThanOrEqual(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.Span`1.Equals(System.Object) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Boolean System.Span`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Span`1.Equals(System.Object) | [ObsoleteAttribute(...)] | 0 | Equals() on Span will always throw an exception. Use the equality operator instead. | +| System.Boolean System.String.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.Equals(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.Equals(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.Equals(System.String,System.String,System.StringComparison) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.Equals(System.String,System.StringComparison) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.IsNullOrEmpty(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.IsNullOrWhiteSpace(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.TryCopyTo(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.String.op_Equality(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.String.op_Inequality(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.StringComparer.Equals(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.StringComparer.Equals(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.StringComparer.IsWellKnownCultureAwareComparer(System.Collections.Generic.IEqualityComparer,System.Globalization.CompareInfo,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.StringComparer.IsWellKnownOrdinalComparer(System.Collections.Generic.IEqualityComparer,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.DecoderExceptionFallback.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.DecoderExceptionFallbackBuffer.Fallback(System.Byte[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Text.DecoderFallbackBuffer.Fallback(System.Byte[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Text.DecoderReplacementFallback.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.EncoderExceptionFallback.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.EncoderReplacementFallback.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.Encoding.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.EncodingInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.Rune.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.Rune.IsValid(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Text.Rune.TryCreate(System.UInt32,System.Text.Rune) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Text.Rune.TryGetRuneAt(System.String,System.Int32,System.Text.Rune) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Boolean System.Text.StringBuilder.Equals(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Text.StringBuilder.Equals(System.Text.StringBuilder) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.UTF7Encoding.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.UTF8Encoding.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.UTF32Encoding.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Text.UnicodeEncoding.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Threading.AsyncFlowControl.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Threading.CancellationTokenRegistration.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Threading.EventWaitHandle.TryOpenExisting(System.String,System.Threading.EventWaitHandle) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Boolean System.Threading.ManualResetEventSlim.Wait(System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.ManualResetEventSlim.Wait(System.Int32,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.ManualResetEventSlim.Wait(System.TimeSpan) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.ManualResetEventSlim.Wait(System.TimeSpan,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Monitor.Wait(System.Object) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Monitor.Wait(System.Object,System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Monitor.Wait(System.Object,System.Int32,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Monitor.Wait(System.Object,System.TimeSpan) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Monitor.Wait(System.Object,System.TimeSpan,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Semaphore.TryOpenExisting(System.String,System.Threading.Semaphore) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Boolean System.Threading.SemaphoreSlim.Wait(System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.SemaphoreSlim.Wait(System.Int32,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.SemaphoreSlim.Wait(System.TimeSpan) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.SemaphoreSlim.Wait(System.TimeSpan,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.SemaphoreSlim.WaitUntilCountOrTimeout(System.Int32,System.UInt32,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Tasks.Task.WaitAll(System.Threading.Tasks.Task[],System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Tasks.Task.WaitAll(System.Threading.Tasks.Task[],System.Int32,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Tasks.Task.WaitAll(System.Threading.Tasks.Task[],System.TimeSpan) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Tasks.Task.WaitAllBlockingCore(System.Collections.Generic.List,System.Int32,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Tasks.Task.WaitAllCore(System.Threading.Tasks.Task[],System.Int32,System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Boolean System.Threading.Tasks.ValueTask.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Threading.Tasks.ValueTask`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Threading.ThreadPool.BindHandle(System.IntPtr) | [ObsoleteAttribute(...)] | 0 | ThreadPool.BindHandle(IntPtr) has been deprecated. Use ThreadPool.BindHandle(SafeHandle) instead. | +| System.Boolean System.Threading.ThreadPool.BindHandle(System.IntPtr) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Boolean System.Threading.ThreadPool.BindHandle(System.Runtime.InteropServices.SafeHandle) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Boolean System.Threading.ThreadPool.UnsafeQueueNativeOverlapped(System.Threading.NativeOverlapped*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.Threading.ThreadPool.UnsafeQueueNativeOverlapped(System.Threading.NativeOverlapped*) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Threading.ThreadPool.UnsafeQueueNativeOverlapped(System.Threading.NativeOverlapped*) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Boolean System.Threading.Timer.Change(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Boolean System.TimeOnly.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeOnly.TryParse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.TimeOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.TryParse(System.String,System.IFormatProvider,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeOnly.TryParse(System.String,System.TimeOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.TryParseExact(System.ReadOnlySpan,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.TimeOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.TryParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles,System.TimeOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.TryParseExact(System.String,System.String,System.TimeOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.TryParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles,System.TimeOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.TryParseExact(System.String,System.String[],System.TimeOnly) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeOnly.op_Equality(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeOnly.op_GreaterThan(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeOnly.op_GreaterThanOrEqual(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeOnly.op_Inequality(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeOnly.op_LessThan(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeOnly.op_LessThanOrEqual(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.TryParse(System.String,System.IFormatProvider,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParse(System.String,System.IFormatProvider,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.TryParse(System.String,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParseExact(System.ReadOnlySpan,System.String[],System.IFormatProvider,System.Globalization.TimeSpanStyles,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParseExact(System.ReadOnlySpan,System.String[],System.IFormatProvider,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.TimeSpanStyles,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParseExact(System.String,System.String,System.IFormatProvider,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.TimeSpanStyles,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.TryParseExact(System.String,System.String[],System.IFormatProvider,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeSpan.op_Equality(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.op_GreaterThan(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.op_GreaterThanOrEqual(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.op_Inequality(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.op_LessThan(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeSpan.op_LessThanOrEqual(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.TimeZoneInfo.AdjustmentRule.Equals(System.TimeZoneInfo.AdjustmentRule) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeZoneInfo.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeZoneInfo.Equals(System.TimeZoneInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeZoneInfo.TransitionTime.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TimeZoneInfo.TryConvertWindowsIdToIanaId(System.String,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`2.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`3.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`4.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`5.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`6.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`7.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Tuple`8.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.Equals(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.ImplementInterface(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Boolean System.Type.ImplementInterface(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2085:UnrecognizedReflectionPattern | +| System.Boolean System.Type.IsAssignableFrom(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.IsAssignableTo(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.IsEquivalentTo(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.IsInstanceOfType(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.op_Equality(System.Type,System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.Type.op_Inequality(System.Type,System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.TypedReference.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt16.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt16.IsPow2(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.TryCreate`1(!0,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt16) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt16.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.TryParse(System.String,System.IFormatProvider,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.TryParse(System.String,System.UInt16) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt16.op_Equality(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.op_GreaterThan(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.op_GreaterThanOrEqual(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.op_Inequality(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.op_LessThan(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt16.op_LessThanOrEqual(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt32.IsPow2(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.TryCreate`1(!0,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt32.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.TryParse(System.String,System.IFormatProvider,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.TryParse(System.String,System.UInt32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt32.op_Equality(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.op_GreaterThan(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.op_GreaterThanOrEqual(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.op_Inequality(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.op_LessThan(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt32.op_LessThanOrEqual(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt64.IsPow2(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.TryCreate`1(!0,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt64.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.TryParse(System.String,System.IFormatProvider,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.TryParse(System.String,System.UInt64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UInt64.op_Equality(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.op_GreaterThan(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.op_GreaterThanOrEqual(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.op_Inequality(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.op_LessThan(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UInt64.op_LessThanOrEqual(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UIntPtr.IsPow2(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.TryCreate`1(!0,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.TryParse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.TryParse(System.ReadOnlySpan,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UIntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UIntPtr.TryParse(System.String,System.Globalization.NumberStyles,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.TryParse(System.String,System.IFormatProvider,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.TryParse(System.String,System.UIntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.UIntPtr.op_Equality(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.op_GreaterThan(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.op_GreaterThanOrEqual(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.op_Inequality(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.op_LessThan(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.UIntPtr.op_LessThanOrEqual(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Boolean System.ValueTuple.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`1.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`2.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`3.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`4.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`5.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`6.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`7.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueTuple`8.Equals(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Boolean System.ValueType.Equals(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Boolean System.ValueType.Equals(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Boolean System.Version.TryFormat(System.Span,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Version.TryFormat(System.Span,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Boolean System.Version.TryParse(System.ReadOnlySpan,System.Version) | [NullableContextAttribute(...)] | 0 | 0 | | System.Buffer | [NullableAttribute(...)] | 0 | 0 | | System.Buffer | [NullableContextAttribute(...)] | 0 | 1 | | System.Buffers.ArrayPool`1 | [NullableAttribute(...)] | 0 | 0 | | System.Buffers.ArrayPool`1 | [NullableContextAttribute(...)] | 0 | 1 | +| System.Buffers.IPinnable | [NullableAttribute(...)] | 0 | 2 | +| System.Buffers.StandardFormat System.Buffers.StandardFormat.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 2 | | System.ByReference`1 | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.ByReference`1 | [ObsoleteAttribute(...)] | 1 | True | +| System.Byte System.Byte.Abs(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Clamp(System.Byte,System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.LeadingZeroCount(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Log2(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Max(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Min(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte System.Byte.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte System.Byte.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte System.Byte.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte System.Byte.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.PopCount(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.RotateLeft(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.RotateRight(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.Sign(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.TrailingZeroCount(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_Addition(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_BitwiseAnd(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_BitwiseOr(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_Decrement(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_Division(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_ExclusiveOr(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_Increment(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_LeftShift(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_Modulus(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_Multiply(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_OnesComplement(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_RightShift(System.Byte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_Subtraction(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_UnaryNegation(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Byte.op_UnaryPlus(System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Byte System.Convert.ToByte(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Byte System.Convert.ToByte(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Byte System.Convert.ToByte(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Byte System.Convert.ToByte(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Byte System.Runtime.InteropServices.MemoryMarshal.GetArrayDataReference(System.Array) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte[] System.BitConverter.GetBytes(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Byte[] System.BitConverter.GetBytes(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Byte[] System.BitConverter.GetBytes(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Byte[] System.Convert.FromBase64CharArray(System.Char[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte[] System.Convert.FromBase64String(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte[] System.Convert.FromHexString(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Byte[] System.Convert.FromHexString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte[] System.Diagnostics.Tracing.EventSource.CreateManifestAndDescriptors(System.Type,System.String,System.Diagnostics.Tracing.EventSource,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Byte[] System.Diagnostics.Tracing.EventSource.CreateManifestAndDescriptors(System.Type,System.String,System.Diagnostics.Tracing.EventSource,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2114:ReflectionToDynamicallyAccessedMembers | +| System.Byte[] System.Guid.ToByteArray() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte[] System.Reflection.Emit.ModuleBuilder.ResolveSignature(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Byte[] System.Reflection.MethodBody.GetILAsByteArray() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Byte[] System.Reflection.Module.ResolveSignature(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Byte[] System.Reflection.RuntimeModule.ResolveSignature(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Byte[] System.Security.PermissionSet.ConvertPermissionSet(System.String,System.Byte[],System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Byte[] System.Text.UTF8Encoding.GetPreamble() | [NullableContextAttribute(...)] | 0 | 1 | | System.CLSCompliantAttribute | [AttributeUsageAttribute(...)] | 0 | 32767 | | System.CannotUnloadAppDomainException | [NullableAttribute(...)] | 0 | 0 | | System.CannotUnloadAppDomainException | [NullableContextAttribute(...)] | 0 | 2 | | System.CannotUnloadAppDomainException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Char System.BitConverter.ToChar(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Char System.Char.Abs(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Clamp(System.Char,System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.LeadingZeroCount(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Log2(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Max(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Min(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Char System.Char.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.PopCount(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.RotateLeft(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.RotateRight(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.Sign(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.ToLower(System.Char,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Char System.Char.ToUpper(System.Char,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Char System.Char.TrailingZeroCount(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_Addition(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_BitwiseAnd(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_BitwiseOr(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_Decrement(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_Division(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_ExclusiveOr(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_Increment(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_LeftShift(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_Modulus(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_Multiply(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_OnesComplement(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_RightShift(System.Char,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_Subtraction(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_UnaryNegation(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Char.op_UnaryPlus(System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Char System.Convert.ToChar(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Char System.Convert.ToChar(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Char System.Convert.ToChar(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Char System.Convert.ToChar(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Char System.Convert.ToChar(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Char System.Convert.ToChar(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Char System.String.GetPinnableReference() | [EditorBrowsableAttribute(...)] | 0 | 1 | | System.CodeDom.Compiler.GeneratedCodeAttribute | [AttributeUsageAttribute(...)] | 0 | 32767 | | System.CodeDom.Compiler.GeneratedCodeAttribute | [NullableAttribute(...)] | 0 | 0 | | System.CodeDom.Compiler.GeneratedCodeAttribute | [NullableContextAttribute(...)] | 0 | 2 | @@ -1599,9 +6110,11 @@ attrArgPositional | System.Collections.Generic.Comparer`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.Comparer`1 | [TypeDependencyAttribute(...)] | 0 | System.Collections.Generic.ObjectComparer`1 | | System.Collections.Generic.Comparer`1 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Collections.Generic.Dictionary.Enumerator System.Collections.Generic.Dictionary`2.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 0 | | System.Collections.Generic.Dictionary.KeyCollection System.Collections.Generic.Dictionary`2.Keys | [NullableAttribute(...)] | 0 | [1,0,0] | | System.Collections.Generic.Dictionary.ValueCollection System.Collections.Generic.Dictionary`2.Values | [NullableAttribute(...)] | 0 | [1,0,0] | | System.Collections.Generic.Dictionary> System.Runtime.Loader.AssemblyLoadContext.AllContexts | [MemberNotNullAttribute(...)] | 0 | s_allContexts | +| System.Collections.Generic.Dictionary> System.Runtime.Loader.AssemblyLoadContext.get_AllContexts() | [MemberNotNullAttribute(...)] | 0 | s_allContexts | | System.Collections.Generic.Dictionary`2 | [DebuggerDisplayAttribute(...)] | 0 | Count = {Count} | | System.Collections.Generic.Dictionary`2 | [DebuggerTypeProxyAttribute(...)] | 0 | System.Collections.Generic.IDictionaryDebugView`2 | | System.Collections.Generic.Dictionary`2 | [DefaultMemberAttribute(...)] | 0 | Item | @@ -1626,24 +6139,71 @@ attrArgPositional | System.Collections.Generic.GenericEqualityComparer`1 | [NullableAttribute(...)] | 0 | [0,1] | | System.Collections.Generic.GenericEqualityComparer`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.GenericEqualityComparer`1 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Collections.Generic.HashSet.Enumerator System.Collections.Generic.HashSet`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 0 | | System.Collections.Generic.HashSet`1 | [DebuggerDisplayAttribute(...)] | 0 | Count = {Count} | | System.Collections.Generic.HashSet`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.Collections.Generic.ICollectionDebugView`1 | | System.Collections.Generic.HashSet`1 | [NullableAttribute(...)] | 0 | 0 | | System.Collections.Generic.HashSet`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.HashSet`1 | [TypeForwardedFromAttribute(...)] | 0 | System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Collections.Generic.HashSet`1.Enumerator | [NullableContextAttribute(...)] | 0 | 0 | +| System.Collections.Generic.IArraySortHelper System.Collections.Generic.ArraySortHelper`2.CreateArraySortHelper() | [DynamicDependencyAttribute(...)] | 0 | #ctor | +| System.Collections.Generic.IArraySortHelper System.Collections.Generic.ArraySortHelper`2.CreateArraySortHelper() | [DynamicDependencyAttribute(...)] | 1 | System.Collections.Generic.GenericArraySortHelper`2 | +| System.Collections.Generic.IArraySortHelper System.Collections.Generic.ArraySortHelper`1.CreateArraySortHelper() | [DynamicDependencyAttribute(...)] | 0 | #ctor | +| System.Collections.Generic.IArraySortHelper System.Collections.Generic.ArraySortHelper`1.CreateArraySortHelper() | [DynamicDependencyAttribute(...)] | 1 | System.Collections.Generic.GenericArraySortHelper`1 | | System.Collections.Generic.IAsyncEnumerable`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.ICollection`1 | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.Generic.IComparer | [NullableAttribute(...)] | 0 | [2,1] | | System.Collections.Generic.IComparer`1 | [NullableContextAttribute(...)] | 0 | 2 | +| System.Collections.Generic.IDictionary | [NullableAttribute(...)] | 0 | [2,1,2] | | System.Collections.Generic.IDictionary System.Diagnostics.Tracing.EventCommandEventArgs.Arguments | [NullableAttribute(...)] | 0 | [2,1,2] | | System.Collections.Generic.IDictionary`2 | [DefaultMemberAttribute(...)] | 0 | Item | | System.Collections.Generic.IDictionary`2 | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.Generic.IEnumerable System.Runtime.InteropServices.MemoryMarshal.ToEnumerable`1(System.ReadOnlyMemory) | [IteratorStateMachineAttribute(...)] | 0 | System.Runtime.InteropServices.MemoryMarshal.d__18`1 | +| System.Collections.Generic.IEnumerable System.Runtime.InteropServices.MemoryMarshal.ToEnumerable`1(System.ReadOnlyMemory) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.Generic.IEnumerable> | [NullableAttribute(...)] | 0 | [1,0,1,1] | +| System.Collections.Generic.IEnumerable> System.Diagnostics.Tracing.CounterPayload.get_ForEnumeration() | [IteratorStateMachineAttribute(...)] | 0 | System.Diagnostics.Tracing.CounterPayload.d__51 | +| System.Collections.Generic.IEnumerable> System.Diagnostics.Tracing.IncrementingCounterPayload.get_ForEnumeration() | [IteratorStateMachineAttribute(...)] | 0 | System.Diagnostics.Tracing.IncrementingCounterPayload.d__39 | +| System.Collections.Generic.IEnumerable System.Diagnostics.Tracing.EventSource.GetSources() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.Generic.IEnumerable System.Threading.ThreadPool.GetGloballyQueuedWorkItems() | [IteratorStateMachineAttribute(...)] | 0 | System.Threading.ThreadPool.d__79 | +| System.Collections.Generic.IEnumerable System.Threading.ThreadPool.GetLocallyQueuedWorkItems() | [IteratorStateMachineAttribute(...)] | 0 | System.Threading.ThreadPool.d__78 | +| System.Collections.Generic.IEnumerable System.Threading.ThreadPool.GetQueuedWorkItems() | [IteratorStateMachineAttribute(...)] | 0 | System.Threading.ThreadPool.d__77 | +| System.Collections.Generic.IEnumerable System.Runtime.Loader.AssemblyLoadContext.get_Assemblies() | [IteratorStateMachineAttribute(...)] | 0 | System.Runtime.Loader.AssemblyLoadContext.d__55 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredConstructors() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Collections.Generic.IEnumerable | [NullableAttribute(...)] | 0 | [2,1] | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredFields() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredMembers() | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.GetDeclaredMethods(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.GetDeclaredMethods(System.String) | [IteratorStateMachineAttribute(...)] | 0 | System.Reflection.TypeInfo.d__10 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredMethods() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredProperties() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Collections.Generic.IEnumerable System.Reflection.Assembly.get_DefinedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Collections.Generic.IEnumerable System.Reflection.RuntimeAssembly.get_DefinedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredNestedTypes() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_DeclaredNestedTypes() | [IteratorStateMachineAttribute(...)] | 0 | System.Reflection.TypeInfo.d__22 | +| System.Collections.Generic.IEnumerable System.Runtime.Loader.AssemblyLoadContext.get_All() | [IteratorStateMachineAttribute(...)] | 0 | System.Runtime.Loader.AssemblyLoadContext.d__85 | +| System.Collections.Generic.IEnumerable System.Runtime.Loader.LibraryNameVariation.DetermineLibraryNameVariations(System.String,System.Boolean,System.Boolean) | [IteratorStateMachineAttribute(...)] | 0 | System.Runtime.Loader.LibraryNameVariation.d__5 | +| System.Collections.Generic.IEnumerable | [NullableAttribute(...)] | 0 | [1,2] | +| System.Collections.Generic.IEnumerable System.Threading.Tasks.ThreadPoolTaskScheduler.FilterTasksFromWorkItems(System.Collections.Generic.IEnumerable) | [IteratorStateMachineAttribute(...)] | 0 | System.Threading.Tasks.ThreadPoolTaskScheduler.d__6 | +| System.Collections.Generic.IEnumerable System.Threading.TimerQueue.GetTimersForDebugger() | [IteratorStateMachineAttribute(...)] | 0 | System.Threading.TimerQueue.d__16 | +| System.Collections.Generic.IEnumerable System.Reflection.Assembly.get_ExportedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Collections.Generic.IEnumerable System.Reflection.TypeInfo.get_ImplementedInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Collections.Generic.IEnumerator System.Collections.Concurrent.ConcurrentQueue`1.Enumerate(System.Collections.Concurrent.ConcurrentQueueSegment,System.Int32,System.Collections.Concurrent.ConcurrentQueueSegment,System.Int32) | [IteratorStateMachineAttribute(...)] | 0 | System.Collections.Concurrent.ConcurrentQueue`1.d__26 | +| System.Collections.Generic.IEnumerator System.Collections.Generic.IEnumerable`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.Generic.IEnumerator System.IO.Enumeration.FileSystemEnumerable`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.Generic.IEnumerator System.Threading.Tasks.SingleProducerSingleConsumerQueue`1.GetEnumerator() | [IteratorStateMachineAttribute(...)] | 0 | System.Threading.Tasks.SingleProducerSingleConsumerQueue`1.d__11 | +| System.Collections.Generic.IEnumerator> System.Diagnostics.Tracing.EventPayload.GetEnumerator() | [IteratorStateMachineAttribute(...)] | 0 | System.Diagnostics.Tracing.EventPayload.d__17 | +| System.Collections.Generic.IEnumerator System.Resources.ResourceFallbackManager.GetEnumerator() | [IteratorStateMachineAttribute(...)] | 0 | System.Resources.ResourceFallbackManager.d__5 | +| System.Collections.Generic.IEqualityComparer | [NullableAttribute(...)] | 0 | [2,1] | +| System.Collections.Generic.IEqualityComparer System.Collections.Generic.NonRandomizedStringEqualityComparer.GetStringComparer(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.Generic.IEqualityComparer`1 | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.Generic.IList System.Runtime.CompilerServices.TupleElementNamesAttribute.TransformNames | [NullableAttribute(...)] | 0 | [1,2] | | System.Collections.Generic.IList`1 | [DefaultMemberAttribute(...)] | 0 | Item | | System.Collections.Generic.IList`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.IReadOnlyDictionary`2 | [DefaultMemberAttribute(...)] | 0 | Item | | System.Collections.Generic.IReadOnlyDictionary`2 | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.Generic.IReadOnlyList> | [NullableAttribute(...)] | 0 | [1,0] | +| System.Collections.Generic.IReadOnlyList> | [NullableAttribute(...)] | 0 | [1,0] | | System.Collections.Generic.IReadOnlyList`1 | [DefaultMemberAttribute(...)] | 0 | Item | | System.Collections.Generic.IReadOnlyList`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.IReadOnlySet`1 | [NullableContextAttribute(...)] | 0 | 1 | @@ -1652,13 +6212,16 @@ attrArgPositional | System.Collections.Generic.KeyNotFoundException | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.Generic.KeyNotFoundException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Collections.Generic.KeyValuePair System.Collections.Generic.Dictionary`2.Enumerator.Current | [NullableAttribute(...)] | 0 | [0,1,1] | +| System.Collections.Generic.KeyValuePair System.Collections.Generic.KeyValuePair.Create`2(!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.KeyValuePair[] System.Collections.Generic.IDictionaryDebugView`2.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | | System.Collections.Generic.KeyValuePair`2 | [NullableAttribute(...)] | 0 | 0 | | System.Collections.Generic.KeyValuePair`2 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.KeyValuePair`2 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Collections.Generic.KeyValuePair`2.key | [DebuggerBrowsableAttribute(...)] | 0 | 0 | | System.Collections.Generic.KeyValuePair`2.value | [DebuggerBrowsableAttribute(...)] | 0 | 0 | +| System.Collections.Generic.List | [NullableAttribute(...)] | 0 | [2,1] | | System.Collections.Generic.List System.Threading.ThreadLocal`1.ValuesForDebugDisplay | [NullableAttribute(...)] | 0 | [2,1] | +| System.Collections.Generic.List.Enumerator System.Collections.Generic.List`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 0 | | System.Collections.Generic.List`1 | [DebuggerDisplayAttribute(...)] | 0 | Count = {Count} | | System.Collections.Generic.List`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.Collections.Generic.ICollectionDebugView`1 | | System.Collections.Generic.List`1 | [DefaultMemberAttribute(...)] | 0 | Item | @@ -1674,6 +6237,7 @@ attrArgPositional | System.Collections.Generic.ObjectEqualityComparer`1 | [NullableAttribute(...)] | 0 | [0,1] | | System.Collections.Generic.ObjectEqualityComparer`1 | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.Generic.ObjectEqualityComparer`1 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Collections.Generic.Queue.Enumerator System.Collections.Generic.Queue`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 0 | | System.Collections.Generic.Queue`1 | [DebuggerDisplayAttribute(...)] | 0 | Count = {Count} | | System.Collections.Generic.Queue`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.Collections.Generic.QueueDebugView`1 | | System.Collections.Generic.Queue`1 | [NullableAttribute(...)] | 0 | 0 | @@ -1681,6 +6245,7 @@ attrArgPositional | System.Collections.Generic.Queue`1 | [TypeForwardedFromAttribute(...)] | 0 | System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Collections.Generic.Queue`1.Enumerator | [NullableContextAttribute(...)] | 0 | 0 | | System.Collections.Generic.ReferenceEqualityComparer System.Collections.Generic.ReferenceEqualityComparer.Instance | [NullableAttribute(...)] | 0 | 1 | +| System.Collections.Generic.ReferenceEqualityComparer System.Collections.Generic.ReferenceEqualityComparer.get_Instance() | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.Generic.ValueListBuilder`1 | [DefaultMemberAttribute(...)] | 0 | Item | | System.Collections.Generic.ValueListBuilder`1 | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.Collections.Generic.ValueListBuilder`1 | [ObsoleteAttribute(...)] | 1 | True | @@ -1692,21 +6257,33 @@ attrArgPositional | System.Collections.Hashtable | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Collections.Hashtable.SyncHashtable | [DefaultMemberAttribute(...)] | 0 | Item | | System.Collections.ICollection | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.IComparer | [NullableAttribute(...)] | 0 | 2 | | System.Collections.IComparer | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.IComparer System.Collections.Hashtable.comparer | [NullableAttribute(...)] | 0 | 2 | | System.Collections.IComparer System.Collections.Hashtable.comparer | [ObsoleteAttribute(...)] | 0 | Hashtable.comparer has been deprecated. Use the KeyComparer properties instead. | +| System.Collections.IComparer System.Collections.Hashtable.get_comparer() | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.IDictionary | [DefaultMemberAttribute(...)] | 0 | Item | +| System.Collections.IDictionary | [NullableAttribute(...)] | 0 | 1 | | System.Collections.IDictionary | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.IDictionary System.Exception.Data | [NullableAttribute(...)] | 0 | 1 | +| System.Collections.IDictionary System.Exception.get_Data() | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.IDictionaryEnumerator | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.IDictionaryEnumerator System.Resources.IResourceReader.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.IDictionaryEnumerator System.Resources.ResourceReader.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.IEnumerable | [ComVisibleAttribute(...)] | 0 | True | | System.Collections.IEnumerable | [GuidAttribute(...)] | 0 | 496B0ABE-CDEE-11d3-88E8-00902754C43A | | System.Collections.IEnumerable | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.IEnumerator System.Runtime.InteropServices.ComTypes.IEnumerable.GetEnumerator() | [DispIdAttribute(...)] | 0 | -4 | +| System.Collections.IEnumerator System.Security.PermissionSet.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.IEnumerator System.Security.PermissionSet.GetEnumeratorImpl() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Collections.IEqualityComparer | [NullableAttribute(...)] | 0 | 2 | | System.Collections.IEqualityComparer | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.IEqualityComparer System.Collections.Hashtable.EqualityComparer | [NullableAttribute(...)] | 0 | 2 | +| System.Collections.IEqualityComparer System.Collections.Hashtable.get_EqualityComparer() | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.IHashCodeProvider | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.IHashCodeProvider | [ObsoleteAttribute(...)] | 0 | IHashCodeProvider has been deprecated. Use IEqualityComparer instead. | | System.Collections.IHashCodeProvider | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Collections.IHashCodeProvider System.Collections.Hashtable.get_hcp() | [NullableContextAttribute(...)] | 0 | 2 | | System.Collections.IHashCodeProvider System.Collections.Hashtable.hcp | [NullableAttribute(...)] | 0 | 2 | | System.Collections.IHashCodeProvider System.Collections.Hashtable.hcp | [ObsoleteAttribute(...)] | 0 | Hashtable.hcp has been deprecated. Use the EqualityComparer property instead. | | System.Collections.IList | [DefaultMemberAttribute(...)] | 0 | Item | @@ -1734,6 +6311,7 @@ attrArgPositional | System.Collections.ObjectModel.ReadOnlyCollection`1 | [NullableAttribute(...)] | 0 | 0 | | System.Collections.ObjectModel.ReadOnlyCollection`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Collections.ObjectModel.ReadOnlyCollection`1 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Comparison | [NullableAttribute(...)] | 0 | 1 | | System.ComponentModel.DefaultValueAttribute | [AttributeUsageAttribute(...)] | 0 | 32767 | | System.ComponentModel.DefaultValueAttribute | [NullableAttribute(...)] | 0 | 0 | | System.ComponentModel.DefaultValueAttribute | [NullableContextAttribute(...)] | 0 | 2 | @@ -1745,6 +6323,7 @@ attrArgPositional | System.Console.CancelKeyPress | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.Console.CancelKeyPress | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | | System.Console.CancelKeyPress | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.ConsoleCancelEventArgs | [NullableAttribute(...)] | 0 | 1 | | System.ConsoleColor System.Console.BackgroundColor | [UnsupportedOSPlatformAttribute(...)] | 0 | android | | System.ConsoleColor System.Console.BackgroundColor | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.ConsoleColor System.Console.BackgroundColor | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | @@ -1753,6 +6332,14 @@ attrArgPositional | System.ConsoleColor System.Console.ForegroundColor | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.ConsoleColor System.Console.ForegroundColor | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | | System.ConsoleColor System.Console.ForegroundColor | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.ConsoleKeyInfo System.Console.ReadKey() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.ConsoleKeyInfo System.Console.ReadKey() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.ConsoleKeyInfo System.Console.ReadKey() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.ConsoleKeyInfo System.Console.ReadKey() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.ConsoleKeyInfo System.Console.ReadKey(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.ConsoleKeyInfo System.Console.ReadKey(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.ConsoleKeyInfo System.Console.ReadKey(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.ConsoleKeyInfo System.Console.ReadKey(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | | System.ContextMarshalException | [NullableAttribute(...)] | 0 | 0 | | System.ContextMarshalException | [NullableContextAttribute(...)] | 0 | 2 | | System.ContextMarshalException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -1774,18 +6361,91 @@ attrArgPositional | System.DataMisalignedException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.DateOnly System.DateOnly.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.DateOnly System.DateOnly.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateOnly System.DateOnly.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateOnly System.DateOnly.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateOnly System.DateOnly.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateOnly System.DateOnly.Parse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateOnly System.DateOnly.ParseExact(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateOnly System.DateOnly.ParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateOnly System.DateOnly.ParseExact(System.String,System.String[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateOnly System.DateOnly.ParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | | System.DateTime | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.DateTime System.Convert.ToDateTime(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.DateTime System.Convert.ToDateTime(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.DateTime System.Convert.ToDateTime(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.DateTime System.Convert.ToDateTime(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | | System.DateTime System.DateTime.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.DateTime System.DateTime.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTime System.DateTime.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTime System.DateTime.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTime System.DateTime.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTime System.DateTime.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTime System.DateTime.Parse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTime System.DateTime.ParseExact(System.String,System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTime System.DateTime.ParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTime System.DateTime.ParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTime System.DateTime.op_Addition(System.DateTime,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTime System.DateTime.op_Subtraction(System.DateTime,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.DateTimeOffset | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.DateTimeOffset System.DateTimeOffset.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.DateTimeOffset System.DateTimeOffset.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTimeOffset System.DateTimeOffset.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTimeOffset System.DateTimeOffset.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTimeOffset System.DateTimeOffset.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTimeOffset System.DateTimeOffset.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTimeOffset System.DateTimeOffset.Parse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTimeOffset System.DateTimeOffset.ParseExact(System.String,System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTimeOffset System.DateTimeOffset.ParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTimeOffset System.DateTimeOffset.ParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.DateTimeOffset System.DateTimeOffset.op_Addition(System.DateTimeOffset,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.DateTimeOffset System.DateTimeOffset.op_Subtraction(System.DateTimeOffset,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.DateTimeResult | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.DateTimeResult | [ObsoleteAttribute(...)] | 1 | True | +| System.Decimal System.Convert.ToDecimal(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Convert.ToDecimal(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Convert.ToDecimal(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Convert.ToDecimal(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Decimal.Abs(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Clamp(System.Decimal,System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Max(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Min(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Decimal System.Decimal.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Decimal System.Decimal.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Decimal System.Decimal.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Decimal System.Decimal.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.Sign(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_Addition(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_Decrement(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_Division(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_Implicit(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Decimal.op_Implicit(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Decimal.op_Implicit(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Decimal.op_Implicit(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Decimal System.Decimal.op_Increment(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_Modulus(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_Multiply(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_Subtraction(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_UnaryNegation(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Decimal System.Decimal.op_UnaryPlus(System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Delegate | [ClassInterfaceAttribute(...)] | 0 | 0 | | System.Delegate | [ComVisibleAttribute(...)] | 0 | True | | System.Delegate | [NullableAttribute(...)] | 0 | 0 | +| System.Delegate | [NullableAttribute(...)] | 0 | 2 | | System.Delegate | [NullableContextAttribute(...)] | 0 | 1 | +| System.Delegate System.Delegate.Combine(System.Delegate,System.Delegate) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Delegate System.Delegate.Combine(System.Delegate[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Delegate System.Delegate.CreateDelegate(System.Type,System.Object,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The target method might be removed | +| System.Delegate System.Delegate.CreateDelegate(System.Type,System.Object,System.String,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The target method might be removed | +| System.Delegate System.Delegate.CreateDelegate(System.Type,System.Object,System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The target method might be removed | +| System.Delegate System.Delegate.Remove(System.Delegate,System.Delegate) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Delegate System.Delegate.RemoveAll(System.Delegate,System.Delegate) | [NullableContextAttribute(...)] | 0 | 2 | | System.Diagnostics.CodeAnalysis.AllowNullAttribute | [AttributeUsageAttribute(...)] | 0 | 2432 | | System.Diagnostics.CodeAnalysis.DisallowNullAttribute | [AttributeUsageAttribute(...)] | 0 | 2432 | | System.Diagnostics.CodeAnalysis.DoesNotReturnAttribute | [AttributeUsageAttribute(...)] | 0 | 64 | @@ -1868,11 +6528,14 @@ attrArgPositional | System.Diagnostics.Debug | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.Debug | [NullableContextAttribute(...)] | 0 | 2 | | System.Diagnostics.Debug.AssertInterpolatedStringHandler | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Diagnostics.Debug.AssertInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | condition | | System.Diagnostics.Debug.AssertInterpolatedStringHandler | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.Debug.WriteIfInterpolatedStringHandler | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Diagnostics.Debug.WriteIfInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | condition | | System.Diagnostics.Debug.WriteIfInterpolatedStringHandler | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.DebugProvider | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.DebugProvider | [NullableContextAttribute(...)] | 0 | 2 | +| System.Diagnostics.DebugProvider System.Diagnostics.Debug.SetProvider(System.Diagnostics.DebugProvider) | [NullableContextAttribute(...)] | 0 | 1 | | System.Diagnostics.DebuggableAttribute | [AttributeUsageAttribute(...)] | 0 | 3 | | System.Diagnostics.Debugger | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.Debugger | [NullableContextAttribute(...)] | 0 | 2 | @@ -1892,11 +6555,13 @@ attrArgPositional | System.Diagnostics.DebuggerVisualizerAttribute | [NullableContextAttribute(...)] | 0 | 2 | | System.Diagnostics.StackFrame | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.StackFrame | [NullableContextAttribute(...)] | 0 | 2 | +| System.Diagnostics.StackFrame System.Diagnostics.StackTrace.GetFrame(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | | System.Diagnostics.StackFrameExtensions | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.StackFrameExtensions | [NullableContextAttribute(...)] | 0 | 1 | | System.Diagnostics.StackTrace | [NullableAttribute(...)] | 0 | 0 | | System.Diagnostics.StackTrace | [NullableContextAttribute(...)] | 0 | 1 | | System.Diagnostics.StackTraceHiddenAttribute | [AttributeUsageAttribute(...)] | 0 | 108 | +| System.Diagnostics.Stopwatch System.Diagnostics.Stopwatch.StartNew() | [NullableContextAttribute(...)] | 0 | 1 | | System.Diagnostics.SymbolStore.ISymbolDocumentWriter | [NullableContextAttribute(...)] | 0 | 1 | | System.Diagnostics.Tracing.CounterGroup | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.Diagnostics.Tracing.DiagnosticCounter | [NullableAttribute(...)] | 0 | 0 | @@ -1926,6 +6591,7 @@ attrArgPositional | System.Diagnostics.Tracing.EventSource | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2113:ReflectionToRequiresUnreferencedCode | | System.Diagnostics.Tracing.EventSource | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2115:ReflectionToDynamicallyAccessedMembers | | System.Diagnostics.Tracing.EventSource System.Diagnostics.Tracing.EventWrittenEventArgs.EventSource | [NullableAttribute(...)] | 0 | 1 | +| System.Diagnostics.Tracing.EventSource System.Diagnostics.Tracing.EventWrittenEventArgs.get_EventSource() | [NullableContextAttribute(...)] | 0 | 1 | | System.Diagnostics.Tracing.EventSource.EventCommandExecuted | [NullableAttribute(...)] | 0 | [2,1] | | System.Diagnostics.Tracing.EventSource.EventData | [NullableContextAttribute(...)] | 0 | 0 | | System.Diagnostics.Tracing.EventSourceAttribute | [AttributeUsageAttribute(...)] | 0 | 4 | @@ -1950,12 +6616,95 @@ attrArgPositional | System.Diagnostics.Tracing.PollingCounter | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.Diagnostics.Tracing.SessionMask | [DefaultMemberAttribute(...)] | 0 | Item | | System.Diagnostics.Tracing.TraceLoggingEventHandleTable | [DefaultMemberAttribute(...)] | 0 | Item | +| System.Diagnostics.Tracing.TraceLoggingEventTypes System.Diagnostics.Tracing.EventSource.EventMetadata.get_TraceLoggingEventTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Diagnostics.Tracing.TraceLoggingEventTypes System.Diagnostics.Tracing.EventSource.EventMetadata.get_TraceLoggingEventTypes() | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Diagnostics.Tracing.TraceLoggingEventTypes System.Diagnostics.Tracing.EventSource.EventMetadata.get_TraceLoggingEventTypes() | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Diagnostics.Tracing.TraceLoggingEventTypes System.Diagnostics.Tracing.SimpleEventTypes`1.InitInstance() | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Diagnostics.Tracing.TraceLoggingEventTypes System.Diagnostics.Tracing.SimpleEventTypes`1.get_Instance() | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Diagnostics.Tracing.TraceLoggingTypeInfo System.Diagnostics.Tracing.Statics.CreateDefaultTypeInfo(System.Type,System.Collections.Generic.List) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Diagnostics.Tracing.TraceLoggingTypeInfo System.Diagnostics.Tracing.TraceLoggingTypeInfo.GetInstance(System.Type,System.Collections.Generic.List) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Diagnostics.Tracing.TraceLoggingTypeInfo[] System.Diagnostics.Tracing.TraceLoggingEventTypes.MakeArray(System.Reflection.ParameterInfo[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Diagnostics.Tracing.TraceLoggingTypeInfo[] System.Diagnostics.Tracing.TraceLoggingEventTypes.MakeArray(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | | System.DivideByZeroException | [NullableAttribute(...)] | 0 | 0 | | System.DivideByZeroException | [NullableContextAttribute(...)] | 0 | 2 | | System.DivideByZeroException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.DllNotFoundException | [NullableAttribute(...)] | 0 | 0 | | System.DllNotFoundException | [NullableContextAttribute(...)] | 0 | 2 | | System.DllNotFoundException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Double System.BitConverter.ToDouble(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Double System.BitConverter.UInt64BitsToDouble(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Double System.Char.GetNumericValue(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Double System.Convert.ToDouble(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Double System.Convert.ToDouble(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Double System.Convert.ToDouble(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Double System.Convert.ToDouble(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Double System.Double.Abs(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Acos(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Acosh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Asin(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Asinh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Atan2(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Atan(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Atanh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.BitDecrement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.BitIncrement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Cbrt(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Ceiling(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Clamp(System.Double,System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.CopySign(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Cos(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Cosh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Exp(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Floor(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.FusedMultiplyAdd(System.Double,System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.IEEERemainder(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Log2(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Log10(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Log(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Log(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Max(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.MaxMagnitude(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Min(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.MinMagnitude(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Double System.Double.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Double System.Double.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Double System.Double.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Double System.Double.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Pow(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Round(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Round(System.Double,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Round`1(System.Double,!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Round`1(System.Double,!0,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.ScaleB`1(System.Double,!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Sign(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Sin(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Sinh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Sqrt(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Tan(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Tanh(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.Truncate(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_Addition(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_BitwiseAnd(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_BitwiseOr(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_Decrement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_Division(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_ExclusiveOr(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_Increment(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_Modulus(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_Multiply(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_OnesComplement(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_Subtraction(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_UnaryNegation(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Double.op_UnaryPlus(System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Double System.Globalization.CharUnicodeInfo.GetNumericValue(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Double System.TimeSpan.op_Division(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.DuplicateWaitObjectException | [NullableAttribute(...)] | 0 | 0 | | System.DuplicateWaitObjectException | [NullableContextAttribute(...)] | 0 | 2 | | System.DuplicateWaitObjectException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -1969,11 +6718,24 @@ attrArgPositional | System.Environment | [NullableContextAttribute(...)] | 0 | 1 | | System.Environment.SpecialFolder | [NullableContextAttribute(...)] | 0 | 0 | | System.Environment.SpecialFolderOption | [NullableContextAttribute(...)] | 0 | 0 | +| System.EventArgs | [NullableAttribute(...)] | 0 | 1 | | System.EventArgs | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.EventArgs.Empty | [NullableAttribute(...)] | 0 | 1 | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | +| System.EventHandler | [NullableAttribute(...)] | 0 | [2,1] | | System.Exception | [NullableAttribute(...)] | 0 | 0 | +| System.Exception | [NullableAttribute(...)] | 0 | 1 | | System.Exception | [NullableContextAttribute(...)] | 0 | 2 | | System.Exception | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Exception System.Exception.GetBaseException() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Exception System.Runtime.InteropServices.Marshal.GetExceptionForHR(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Exception System.Runtime.InteropServices.Marshal.GetExceptionForHR(System.Int32,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | | System.Exception.SerializeObjectState | [NullableAttribute(...)] | 0 | [2,1] | | System.Exception.SerializeObjectState | [ObsoleteAttribute(...)] | 0 | BinaryFormatter serialization is obsolete and should not be used. See https://aka.ms/binaryformatter for more information. | | System.Exception[] System.Reflection.ReflectionTypeLoadException.LoaderExceptions | [NullableAttribute(...)] | 0 | [1,2] | @@ -1990,6 +6752,20 @@ attrArgPositional | System.FormatException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.FormattableString | [NullableAttribute(...)] | 0 | 0 | | System.FormattableString | [NullableContextAttribute(...)] | 0 | 1 | +| System.FormattableString System.Runtime.CompilerServices.FormattableStringFactory.Create(System.String,System.Object[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Func | [NullableAttribute(...)] | 0 | [1,1,1,1,1,2,1] | +| System.Func | [NullableAttribute(...)] | 0 | [1,1,1,1,2,1] | +| System.Func | [NullableAttribute(...)] | 0 | [1,1,1,2,1] | +| System.Func> | [NullableAttribute(...)] | 0 | [1,1,1,2,1] | +| System.Func | [NullableAttribute(...)] | 0 | [1,1,2,1] | +| System.Func | [NullableAttribute(...)] | 0 | [1,2,1] | +| System.Func | [NullableAttribute(...)] | 0 | [1,1,2,1] | +| System.Func | [NullableAttribute(...)] | 0 | [2,2,1,2] | +| System.Func | [NullableAttribute(...)] | 0 | [2,1,1] | +| System.Func | [NullableAttribute(...)] | 0 | [2,1,1,2] | +| System.Func | [NullableAttribute(...)] | 0 | [2,1,2] | +| System.Func> | [NullableAttribute(...)] | 0 | [1,2,1] | +| System.Func | [NullableAttribute(...)] | 0 | [1,2] | | System.Func`5 | [NullableAttribute(...)] | 0 | 0 | | System.Func`5 | [NullableContextAttribute(...)] | 0 | 2 | | System.Func`6 | [NullableAttribute(...)] | 0 | 0 | @@ -2026,9 +6802,12 @@ attrArgPositional | System.Globalization.CompareInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.Globalization.CompareInfo | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Globalization.CultureInfo | [NullableAttribute(...)] | 0 | 0 | +| System.Globalization.CultureInfo | [NullableAttribute(...)] | 0 | 2 | | System.Globalization.CultureInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.Globalization.CultureInfo System.Globalization.CultureInfo.DefaultThreadCurrentCulture | [NullableAttribute(...)] | 0 | 2 | | System.Globalization.CultureInfo System.Globalization.CultureInfo.DefaultThreadCurrentUICulture | [NullableAttribute(...)] | 0 | 2 | +| System.Globalization.CultureInfo System.Globalization.CultureInfo.get_DefaultThreadCurrentCulture() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Globalization.CultureInfo System.Globalization.CultureInfo.get_DefaultThreadCurrentUICulture() | [NullableContextAttribute(...)] | 0 | 2 | | System.Globalization.CultureNotFoundException | [NullableAttribute(...)] | 0 | 0 | | System.Globalization.CultureNotFoundException | [NullableContextAttribute(...)] | 0 | 2 | | System.Globalization.CultureNotFoundException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -2067,6 +6846,7 @@ attrArgPositional | System.Globalization.RegionInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.Globalization.SortKey | [NullableAttribute(...)] | 0 | 0 | | System.Globalization.SortKey | [NullableContextAttribute(...)] | 0 | 1 | +| System.Globalization.SortVersion | [NotNullWhenAttribute(...)] | 0 | True | | System.Globalization.SortVersion | [NullableAttribute(...)] | 0 | 0 | | System.Globalization.SortVersion | [NullableContextAttribute(...)] | 0 | 2 | | System.Globalization.SortVersion | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -2094,11 +6874,51 @@ attrArgPositional | System.Globalization.TimeSpanParse.TimeSpanTokenizer | [ObsoleteAttribute(...)] | 1 | True | | System.Globalization.UmAlQuraCalendar | [NullableAttribute(...)] | 0 | 0 | | System.Globalization.UmAlQuraCalendar | [NullableContextAttribute(...)] | 0 | 1 | +| System.Globalization.UnicodeCategory System.Char.GetUnicodeCategory(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Globalization.UnicodeCategory System.Globalization.CharUnicodeInfo.GetUnicodeCategory(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | | System.Guid | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Guid System.Diagnostics.Tracing.EventSource.GetGuid(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Guid System.Guid.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Guid System.Guid.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Guid System.Guid.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Guid System.Guid.ParseExact(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Half System.BitConverter.ToHalf(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Half System.BitConverter.UInt16BitsToHalf(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Half System.Half.Abs(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Acos(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Acosh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Asin(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Asinh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Atan2(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Atan(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Atanh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.BitDecrement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.BitIncrement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Cbrt(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Ceiling(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Clamp(System.Half,System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.CopySign(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Cos(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Cosh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.E | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.Epsilon | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Exp(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Floor(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.FusedMultiplyAdd(System.Half,System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.IEEERemainder(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Log2(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Log10(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Log(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Log(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Max(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.MaxMagnitude(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Min(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.MinMagnitude(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.NaN | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | @@ -2106,10 +6926,44 @@ attrArgPositional | System.Half System.Half.NegativeOne | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.NegativeZero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.One | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Half System.Half.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Half System.Half.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Half System.Half.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Half System.Half.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.Pi | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.PositiveInfinity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Pow(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Round(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Round(System.Half,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Round`1(System.Half,!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Round`1(System.Half,!0,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.ScaleB`1(System.Half,!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Sign(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Sin(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Sinh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Sqrt(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Tan(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Tanh(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.Tau | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.Truncate(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.Half System.Half.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_Addition(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_BitwiseAnd(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_BitwiseOr(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_Decrement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_Division(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_ExclusiveOr(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_Increment(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_Modulus(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_Multiply(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_OnesComplement(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_Subtraction(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_UnaryNegation(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Half System.Half.op_UnaryPlus(System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.HashCode | [NullableAttribute(...)] | 0 | 0 | | System.HashCode | [NullableContextAttribute(...)] | 0 | 1 | | System.HexConverter.<>c.<>9__5_0 | [TupleElementNamesAttribute(...)] | 0 | [Ptr,Length,casing] | @@ -2117,7 +6971,34 @@ attrArgPositional | System.IAdditionOperators`3 | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IAdditiveIdentity`2 | [NullableContextAttribute(...)] | 0 | 1 | | System.IAdditiveIdentity`2 | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IAsyncResult | [NullableAttribute(...)] | 0 | 1 | | System.IAsyncResult | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`4.BeginInvoke(!0,!1,!2,!3,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`5.BeginInvoke(!0,!1,!2,!3,!4,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`6.BeginInvoke(!0,!1,!2,!3,!4,!5,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`7.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`8.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`9.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`10.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`11.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`12.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`13.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`14.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`15.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Action`16.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`5.BeginInvoke(!0,!1,!2,!3,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`6.BeginInvoke(!0,!1,!2,!3,!4,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`7.BeginInvoke(!0,!1,!2,!3,!4,!5,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`8.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`9.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`10.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`11.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`12.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`13.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`14.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`15.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`16.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IAsyncResult System.Func`17.BeginInvoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,System.AsyncCallback,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | | System.IBinaryFloatingPoint`1 | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IBinaryInteger`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.IBinaryInteger`1 | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | @@ -2141,6 +7022,7 @@ attrArgPositional | System.IEquatable`1 | [NullableContextAttribute(...)] | 0 | 2 | | System.IFloatingPoint`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.IFloatingPoint`1 | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IFormatProvider | [NullableAttribute(...)] | 0 | 2 | | System.IFormatProvider | [NullableContextAttribute(...)] | 0 | 2 | | System.IFormattable | [NullableContextAttribute(...)] | 0 | 2 | | System.IIncrementOperators`1 | [NullableContextAttribute(...)] | 0 | 1 | @@ -2166,7 +7048,9 @@ attrArgPositional | System.IO.DirectoryInfo | [NullableAttribute(...)] | 0 | 0 | | System.IO.DirectoryInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.IO.DirectoryInfo System.IO.DirectoryInfo.Parent | [NullableAttribute(...)] | 0 | 2 | +| System.IO.DirectoryInfo System.IO.DirectoryInfo.get_Parent() | [NullableContextAttribute(...)] | 0 | 2 | | System.IO.DirectoryInfo System.IO.FileInfo.Directory | [NullableAttribute(...)] | 0 | 2 | +| System.IO.DirectoryInfo System.IO.FileInfo.get_Directory() | [NullableContextAttribute(...)] | 0 | 2 | | System.IO.DirectoryNotFoundException | [NullableAttribute(...)] | 0 | 0 | | System.IO.DirectoryNotFoundException | [NullableContextAttribute(...)] | 0 | 2 | | System.IO.DirectoryNotFoundException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -2177,10 +7061,13 @@ attrArgPositional | System.IO.Enumeration.FileSystemEntry | [ObsoleteAttribute(...)] | 1 | True | | System.IO.Enumeration.FileSystemEntry._fileNameBuffer | [FixedBufferAttribute(...)] | 0 | System.Char | | System.IO.Enumeration.FileSystemEntry._fileNameBuffer | [FixedBufferAttribute(...)] | 1 | 256 | +| System.IO.Enumeration.FileSystemEnumerable.FindPredicate | [NullableAttribute(...)] | 0 | [2,0] | | System.IO.Enumeration.FileSystemEnumerable.FindPredicate System.IO.Enumeration.FileSystemEnumerable`1.ShouldIncludePredicate | [NullableAttribute(...)] | 0 | [2,0] | | System.IO.Enumeration.FileSystemEnumerable.FindPredicate System.IO.Enumeration.FileSystemEnumerable`1.ShouldRecursePredicate | [NullableAttribute(...)] | 0 | [2,0] | +| System.IO.Enumeration.FileSystemEnumerable.FindTransform | [NullableAttribute(...)] | 0 | [1,0] | | System.IO.Enumeration.FileSystemEnumerator`1._pending | [TupleElementNamesAttribute(...)] | 0 | [Path,RemainingDepth] | | System.IO.EnumerationOptions | [NullableAttribute(...)] | 0 | 0 | +| System.IO.EnumerationOptions | [NullableAttribute(...)] | 0 | 2 | | System.IO.EnumerationOptions | [NullableContextAttribute(...)] | 0 | 1 | | System.IO.File | [NullableAttribute(...)] | 0 | 0 | | System.IO.File | [NullableContextAttribute(...)] | 0 | 1 | @@ -2194,8 +7081,19 @@ attrArgPositional | System.IO.FileNotFoundException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.IO.FileStream | [NullableAttribute(...)] | 0 | 0 | | System.IO.FileStream | [NullableContextAttribute(...)] | 0 | 1 | +| System.IO.FileStream System.Reflection.Assembly.GetFile(System.String) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream System.Reflection.Emit.AssemblyBuilder.GetFile(System.String) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream System.Reflection.Emit.InternalAssemblyBuilder.GetFile(System.String) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream System.Reflection.RuntimeAssembly.GetFile(System.String) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream[] System.Reflection.Assembly.GetFiles() | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream[] System.Reflection.Assembly.GetFiles(System.Boolean) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream[] System.Reflection.Emit.AssemblyBuilder.GetFiles(System.Boolean) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream[] System.Reflection.Emit.InternalAssemblyBuilder.GetFiles(System.Boolean) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | +| System.IO.FileStream[] System.Reflection.RuntimeAssembly.GetFiles(System.Boolean) | [RequiresAssemblyFilesAttribute(...)] | 0 | This member throws an exception for assemblies embedded in a single-file app | | System.IO.FileSystemInfo | [NullableAttribute(...)] | 0 | 0 | | System.IO.FileSystemInfo | [NullableContextAttribute(...)] | 0 | 1 | +| System.IO.FileSystemInfo System.IO.Enumeration.FileSystemEntry.ToFileSystemInfo() | [NullableContextAttribute(...)] | 0 | 1 | +| System.IO.FileSystemInfo System.IO.FileSystemInfo.ResolveLinkTarget(System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | | System.IO.IOException | [NullableAttribute(...)] | 0 | 0 | | System.IO.IOException | [NullableContextAttribute(...)] | 0 | 2 | | System.IO.IOException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -2211,7 +7109,14 @@ attrArgPositional | System.IO.PathTooLongException | [NullableContextAttribute(...)] | 0 | 2 | | System.IO.PathTooLongException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.IO.Stream | [NullableAttribute(...)] | 0 | 0 | +| System.IO.Stream | [NullableAttribute(...)] | 0 | 2 | | System.IO.Stream | [NullableContextAttribute(...)] | 0 | 1 | +| System.IO.Stream System.Console.OpenStandardInput() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.IO.Stream System.Console.OpenStandardInput() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.IO.Stream System.Console.OpenStandardInput() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.IO.Stream System.Console.OpenStandardInput() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.IO.Stream System.Console.OpenStandardInput(System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.IO.Stream System.Console.OpenStandardInput(System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.IO.StreamReader | [NullableAttribute(...)] | 0 | 0 | | System.IO.StreamReader | [NullableContextAttribute(...)] | 0 | 1 | | System.IO.StreamWriter | [NullableAttribute(...)] | 0 | 0 | @@ -2228,6 +7133,7 @@ attrArgPositional | System.IO.TextReader System.Console.In | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | | System.IO.TextWriter | [NullableAttribute(...)] | 0 | 0 | | System.IO.TextWriter | [NullableContextAttribute(...)] | 0 | 1 | +| System.IO.UnmanagedMemoryStream System.Resources.ResourceManager.GetStream(System.String,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | | System.IObservable`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.IObserver`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.IParseable`1 | [NullableContextAttribute(...)] | 0 | 1 | @@ -2253,15 +7159,449 @@ attrArgPositional | System.InsufficientMemoryException | [NullableAttribute(...)] | 0 | 0 | | System.InsufficientMemoryException | [NullableContextAttribute(...)] | 0 | 2 | | System.InsufficientMemoryException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Int16 System.BitConverter.ToInt16(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int16 System.Convert.ToInt16(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int16 System.Convert.ToInt16(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int16 System.Convert.ToInt16(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int16 System.Convert.ToInt16(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int16 System.Int16.Abs(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Clamp(System.Int16,System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.LeadingZeroCount(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Log2(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Max(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Min(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int16 System.Int16.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int16 System.Int16.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int16 System.Int16.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int16 System.Int16.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.PopCount(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.RotateLeft(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.RotateRight(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.Sign(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.TrailingZeroCount(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_Addition(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_BitwiseAnd(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_BitwiseOr(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_Decrement(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_Division(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_ExclusiveOr(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_Increment(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_LeftShift(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_Modulus(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_Multiply(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_OnesComplement(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_RightShift(System.Int16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_Subtraction(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_UnaryNegation(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int16 System.Int16.op_UnaryPlus(System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 Internal.Runtime.CompilerServices.Unsafe.SizeOf`1() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 Internal.Runtime.InteropServices.ComActivator.GetClassFactoryForTypeInternal(Internal.Runtime.InteropServices.ComActivationContextInternal*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 Internal.Runtime.InteropServices.ComActivator.RegisterClassForTypeInternal(Internal.Runtime.InteropServices.ComActivationContextInternal*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 Internal.Runtime.InteropServices.ComActivator.UnregisterClassForTypeInternal(Internal.Runtime.InteropServices.ComActivationContextInternal*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 Internal.Runtime.InteropServices.ComponentActivator.LoadAssemblyAndGetFunctionPointer(System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr,System.IntPtr) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Native hosting is not trim compatible and this warning will be seen if trimming is enabled. | +| System.Int32 System.AppDomain.ExecuteAssembly(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Int32 System.AppDomain.ExecuteAssembly(System.String,System.String[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Int32 System.AppDomain.ExecuteAssembly(System.String,System.String[],System.Byte[],System.Configuration.Assemblies.AssemblyHashAlgorithm) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.AppDomain.ExecuteAssembly(System.String,System.String[],System.Byte[],System.Configuration.Assemblies.AssemblyHashAlgorithm) | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | +| System.Int32 System.AppDomain.ExecuteAssembly(System.String,System.String[],System.Byte[],System.Configuration.Assemblies.AssemblyHashAlgorithm) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Int32 System.AppDomain.GetCurrentThreadId() | [ObsoleteAttribute(...)] | 0 | AppDomain.GetCurrentThreadId has been deprecated because it does not provide a stable Id when managed threads are running on fibers (aka lightweight threads). To get a stable identifier for a managed thread, use the ManagedThreadId property on Thread instead. | +| System.Int32 System.Array.BinarySearch(System.Array,System.Int32,System.Int32,System.Object,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Array.BinarySearch(System.Array,System.Object,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Attribute.GetHashCode() | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Int32 System.Attribute.GetHashCode() | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Int32 System.BitConverter.ToInt32(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Boolean.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Byte.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Char.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Char.ConvertToUtf32(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Collections.ArrayList.Add(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.BinarySearch(System.Int32,System.Int32,System.Object,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.BinarySearch(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.BinarySearch(System.Object,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.IndexOf(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.IndexOf(System.Object,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.IndexOf(System.Object,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.LastIndexOf(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.LastIndexOf(System.Object,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.ArrayList.LastIndexOf(System.Object,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.Comparer.Compare(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.Generic.Comparer`1.Compare(!0,!0) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.Generic.IEqualityComparer`1.GetHashCode(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Collections.Generic.NonRandomizedStringEqualityComparer.GetHashCode(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Collections.Generic.ObjectEqualityComparer`1.GetHashCode(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Collections.Generic.ReferenceEqualityComparer.GetHashCode(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Comparison`1.Invoke(!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Console.Read() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Int32 System.Console.Read() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Int32 System.Console.get_BufferHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Int32 System.Console.get_BufferHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Int32 System.Console.get_BufferHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Int32 System.Console.get_BufferHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Int32 System.Console.get_BufferWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Int32 System.Console.get_BufferWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Int32 System.Console.get_BufferWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Int32 System.Console.get_BufferWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Int32 System.Console.get_CursorSize() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Int32 System.Console.get_CursorSize() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Int32 System.Console.get_CursorSize() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Int32 System.Console.get_CursorSize() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Int32 System.Console.get_WindowHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Int32 System.Console.get_WindowHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Int32 System.Console.get_WindowHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Int32 System.Console.get_WindowHeight() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Int32 System.Console.get_WindowWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Int32 System.Console.get_WindowWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Int32 System.Console.get_WindowWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Int32 System.Console.get_WindowWidth() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Int32 System.Convert.ToBase64CharArray(System.Byte[],System.Int32,System.Int32,System.Char[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Convert.ToBase64CharArray(System.Byte[],System.Int32,System.Int32,System.Char[],System.Int32,System.Base64FormattingOptions) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Convert.ToInt32(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Convert.ToInt32(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Convert.ToInt32(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Convert.ToInt32(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.CultureAwareComparer.GetHashCode(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.DateOnly.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.DateTime.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Decimal.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Diagnostics.Tracing.EventSource.GetHelperCallFirstArg(System.Reflection.MethodInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Int32 System.Diagnostics.Tracing.EventSource.GetHelperCallFirstArg(System.Reflection.MethodInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Int32 System.Double.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Enum.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Globalization.CharUnicodeInfo.GetDecimalDigitValue(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Globalization.CharUnicodeInfo.GetDigitValue(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Globalization.CompareInfo.Compare(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.Compare(System.String,System.Int32,System.Int32,System.String,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Globalization.CompareInfo.Compare(System.String,System.Int32,System.Int32,System.String,System.Int32,System.Int32,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Globalization.CompareInfo.Compare(System.String,System.Int32,System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Globalization.CompareInfo.Compare(System.String,System.Int32,System.String,System.Int32,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Globalization.CompareInfo.Compare(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Globalization.CompareInfo.Compare(System.String,System.String,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Globalization.CompareInfo.GetHashCode(System.ReadOnlySpan,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.GetSortKey(System.ReadOnlySpan,System.Span,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.GetSortKeyLength(System.ReadOnlySpan,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.IndexOf(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.IndexOf(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.IndexOf(System.ReadOnlySpan,System.Text.Rune,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.LastIndexOf(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.LastIndexOf(System.ReadOnlySpan,System.ReadOnlySpan,System.Globalization.CompareOptions,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.CompareInfo.LastIndexOf(System.ReadOnlySpan,System.Text.Rune,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Globalization.StringInfo.GetNextTextElementLength(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Guid.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Half.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.HashCode.GetHashCode() | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Int32 System.HashCode.GetHashCode() | [ObsoleteAttribute(...)] | 0 | HashCode is a mutable struct and should not be compared with other HashCodes. Use ToHashCode to retrieve the computed hash code. | +| System.Int32 System.HashCode.GetHashCode() | [ObsoleteAttribute(...)] | 1 | True | +| System.Int32 System.IO.BinaryReader.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.BinaryReader.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.BufferedStream.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.FileStream.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.MemoryStream.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.Stream.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.StreamReader.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.StreamReader.ReadBlock(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.StringReader.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.StringReader.ReadBlock(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.TextReader.Read(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.TextReader.ReadBlock(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.IO.UnmanagedMemoryStream.Read(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Int16.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Int32.Abs(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Clamp(System.Int32,System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Int32.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.LeadingZeroCount(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Log2(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Max(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Min(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Int32.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Int32.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Int32.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Int32.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.PopCount(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.RotateLeft(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.RotateRight(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.Sign(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.TrailingZeroCount(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_Addition(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_BitwiseAnd(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_BitwiseOr(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_Decrement(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_Division(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_ExclusiveOr(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_Increment(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_LeftShift(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_Modulus(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_Multiply(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_OnesComplement(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_RightShift(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_Subtraction(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_UnaryNegation(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int32.op_UnaryPlus(System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int32 System.Int64.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.IntPtr.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Math.Sign(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.MemoryExtensions.BinarySearch`1(System.ReadOnlySpan,System.IComparable) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.BinarySearch`1(System.Span,System.IComparable) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.ReadOnlySpan,!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.ReadOnlySpan,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.Span,!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.BinarySearch`2(System.Span,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.ReadOnlySpan,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.ReadOnlySpan,!0,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.Span,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.IndexOfAny`1(System.Span,!0,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.IndexOf`1(System.ReadOnlySpan,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.IndexOf`1(System.Span,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.ReadOnlySpan,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.ReadOnlySpan,!0,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.Span,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.LastIndexOfAny`1(System.Span,!0,!0,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.LastIndexOf`1(System.ReadOnlySpan,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.MemoryExtensions.LastIndexOf`1(System.Span,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Memory`1.GetHashCode() | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Int32 System.Numerics.BitOperations.LeadingZeroCount(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Numerics.BitOperations.LeadingZeroCount(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Numerics.BitOperations.Log2(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Numerics.BitOperations.Log2(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Numerics.BitOperations.PopCount(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Numerics.BitOperations.PopCount(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Numerics.BitOperations.TrailingZeroCount(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Numerics.BitOperations.TrailingZeroCount(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.OrdinalComparer.GetHashCode(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.ReadOnlyMemory`1.GetHashCode() | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Int32 System.ReadOnlySpan`1.GetHashCode() | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Int32 System.ReadOnlySpan`1.GetHashCode() | [ObsoleteAttribute(...)] | 0 | GetHashCode() on ReadOnlySpan will always throw an exception. | +| System.Int32 System.Runtime.CompilerServices.RuntimeHelpers.GetHashCode(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Runtime.InteropServices.ComTypes.IMoniker.IsRunning(System.Runtime.InteropServices.ComTypes.IBindCtx,System.Runtime.InteropServices.ComTypes.IMoniker,System.Runtime.InteropServices.ComTypes.IMoniker) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Runtime.InteropServices.Marshal.FinalReleaseComObject(System.Object) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Int32 System.Runtime.InteropServices.Marshal.GetEndComSlot(System.Type) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Int32 System.Runtime.InteropServices.Marshal.GetHRForException(System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Runtime.InteropServices.Marshal.GetStartComSlot(System.Type) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Int32 System.Runtime.InteropServices.Marshal.ReleaseComObject(System.Object) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Int32 System.Runtime.InteropServices.Marshal.SizeOf`1() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Runtime.InteropServices.NFloat.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.SByte.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Single.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Span`1.GetHashCode() | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Int32 System.Span`1.GetHashCode() | [ObsoleteAttribute(...)] | 0 | GetHashCode() on Span will always throw an exception. | +| System.Int32 System.String.Compare(System.String,System.Int32,System.String,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.Int32,System.String,System.Int32,System.Int32,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.Int32,System.String,System.Int32,System.Int32,System.Boolean,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.Int32,System.String,System.Int32,System.Int32,System.Globalization.CultureInfo,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.Int32,System.String,System.Int32,System.Int32,System.StringComparison) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.String,System.Boolean,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.String,System.Globalization.CultureInfo,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.Compare(System.String,System.String,System.StringComparison) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.CompareOrdinal(System.String,System.Int32,System.String,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.CompareOrdinal(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.CompareTo(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.String.GetHashCode(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.String.GetHashCode(System.ReadOnlySpan,System.StringComparison) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.StringComparer.Compare(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.StringComparer.Compare(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.Text.ASCIIEncoding.GetByteCount(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.ASCIIEncoding.GetByteCount(System.Char[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.ASCIIEncoding.GetByteCount(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.ASCIIEncoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.ASCIIEncoding.GetBytes(System.Char[],System.Int32,System.Int32,System.Byte[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.ASCIIEncoding.GetBytes(System.String,System.Int32,System.Int32,System.Byte[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.ASCIIEncoding.GetCharCount(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.ASCIIEncoding.GetCharCount(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.ASCIIEncoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.ASCIIEncoding.GetChars(System.Byte[],System.Int32,System.Int32,System.Char[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.Decoder.GetCharCount(System.Byte*,System.Int32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Decoder.GetCharCount(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.Decoder.GetCharCount(System.Byte[],System.Int32,System.Int32,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.Decoder.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Decoder.GetChars(System.Byte[],System.Int32,System.Int32,System.Char[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.Decoder.GetChars(System.Byte[],System.Int32,System.Int32,System.Char[],System.Int32,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.Encoder.GetByteCount(System.Char*,System.Int32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Encoder.GetByteCount(System.Char[],System.Int32,System.Int32,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.Encoder.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Encoder.GetBytes(System.Char[],System.Int32,System.Int32,System.Byte[],System.Int32,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.Encoding.GetByteCount(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Encoding.GetByteCount(System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.Encoding.GetByteCount(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.Encoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Encoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.Encoding.GetBytes(System.ReadOnlySpan,System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.Encoding.GetCharCount(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Encoding.GetCharCount(System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.Encoding.GetCharCount(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.Encoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.Encoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.Encoding.GetChars(System.ReadOnlySpan,System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF7Encoding.GetByteCount(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF7Encoding.GetByteCount(System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF7Encoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF7Encoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF7Encoding.GetCharCount(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF7Encoding.GetCharCount(System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF7Encoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF7Encoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF8Encoding.GetByteCount(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF8Encoding.GetByteCount(System.Char[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.UTF8Encoding.GetByteCount(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.UTF8Encoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF8Encoding.GetBytes(System.Char[],System.Int32,System.Int32,System.Byte[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.UTF8Encoding.GetBytes(System.String,System.Int32,System.Int32,System.Byte[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.UTF8Encoding.GetCharCount(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF8Encoding.GetCharCount(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.UTF8Encoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF8Encoding.GetChars(System.Byte[],System.Int32,System.Int32,System.Char[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32 System.Text.UTF32Encoding.GetByteCount(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF32Encoding.GetByteCount(System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF32Encoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF32Encoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF32Encoding.GetCharCount(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF32Encoding.GetCharCount(System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UTF32Encoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UTF32Encoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UnicodeEncoding.GetByteCount(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UnicodeEncoding.GetByteCount(System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UnicodeEncoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UnicodeEncoding.GetBytes(System.Char*,System.Int32,System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UnicodeEncoding.GetCharCount(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UnicodeEncoding.GetCharCount(System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Text.UnicodeEncoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Text.UnicodeEncoding.GetChars(System.Byte*,System.Int32,System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int32 System.Threading.SynchronizationContext.Wait(System.IntPtr[],System.Boolean,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.Threading.SynchronizationContext.WaitHelper(System.IntPtr[],System.Boolean,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int32 System.TimeOnly.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.TimeSpan.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.UInt16.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.UInt32.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.UInt64.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32 System.UIntPtr.CompareTo(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Int32[] System.Decimal.GetBits(System.Decimal) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int32[] System.Globalization.HebrewCalendar.get_Eras() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int64 System.BitConverter.ToInt64(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Int64 System.Convert.ToInt64(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int64 System.Convert.ToInt64(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int64 System.Convert.ToInt64(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int64 System.Convert.ToInt64(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Int64 System.IO.RandomAccess.GetLength(Microsoft.Win32.SafeHandles.SafeFileHandle) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int64 System.IO.RandomAccess.Read(Microsoft.Win32.SafeHandles.SafeFileHandle,System.Collections.Generic.IReadOnlyList>,System.Int64) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int64 System.Int64.Abs(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Clamp(System.Int64,System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.LeadingZeroCount(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Log2(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Max(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Min(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int64 System.Int64.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int64 System.Int64.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int64 System.Int64.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Int64 System.Int64.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.PopCount(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.RotateLeft(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.RotateRight(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.Sign(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.TrailingZeroCount(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_Addition(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_BitwiseAnd(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_BitwiseOr(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_Decrement(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_Division(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_ExclusiveOr(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_Increment(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_LeftShift(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_Modulus(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_Multiply(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_OnesComplement(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_RightShift(System.Int64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_Subtraction(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_UnaryNegation(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Int64 System.Int64.op_UnaryPlus(System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.IntPtr Internal.Runtime.InteropServices.ComponentActivator.InternalGetFunctionPointer(System.Runtime.Loader.AssemblyLoadContext,System.String,System.String,System.IntPtr) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Native hosting is not trim compatible and this warning will be seen if trimming is enabled. | | System.IntPtr System.IO.FileStream.Handle | [ObsoleteAttribute(...)] | 0 | FileStream.Handle has been deprecated. Use FileStream's SafeFileHandle property instead. | +| System.IntPtr System.IntPtr.Abs(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr System.IntPtr.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Clamp(System.IntPtr,System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.LeadingZeroCount(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Log2(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Max(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr System.IntPtr.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Min(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr System.IntPtr.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr System.IntPtr.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr System.IntPtr.NegativeOne | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr System.IntPtr.One | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IntPtr System.IntPtr.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IntPtr System.IntPtr.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IntPtr System.IntPtr.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IntPtr System.IntPtr.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.PopCount(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.RotateLeft(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.RotateRight(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.Sign(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.TrailingZeroCount(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.IntPtr System.IntPtr.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_Addition(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_BitwiseAnd(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_BitwiseOr(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_Decrement(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_Division(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_ExclusiveOr(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_Explicit(System.Void*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.IntPtr System.IntPtr.op_Increment(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_LeftShift(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_Modulus(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_Multiply(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_OnesComplement(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_RightShift(System.IntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_Subtraction(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_UnaryNegation(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.IntPtr.op_UnaryPlus(System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.IntPtr System.Runtime.InteropServices.DllImportResolver.Invoke(System.String,System.Reflection.Assembly,System.Nullable) | [NullableContextAttribute(...)] | 0 | 1 | +| System.IntPtr System.Runtime.InteropServices.Marshal.CreateAggregatedObject(System.IntPtr,System.Object) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.IntPtr System.Runtime.InteropServices.Marshal.CreateAggregatedObject`1(System.IntPtr,!0) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.IntPtr System.Runtime.InteropServices.Marshal.GetComInterfaceForObject(System.Object,System.Type) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.IntPtr System.Runtime.InteropServices.Marshal.GetComInterfaceForObject(System.Object,System.Type,System.Runtime.InteropServices.CustomQueryInterfaceMode) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.IntPtr System.Runtime.InteropServices.Marshal.GetComInterfaceForObject`2(!0) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.GetComInterfaceForObject`2(!0) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.IntPtr System.Runtime.InteropServices.Marshal.GetIDispatchForObject(System.Object) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.IntPtr System.Runtime.InteropServices.Marshal.GetIUnknownForObject(System.Object) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.IntPtr System.Runtime.InteropServices.Marshal.OffsetOf(System.Type,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.IntPtr System.Runtime.InteropServices.Marshal.OffsetOf(System.Type,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToBSTR(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToCoTaskMemAnsi(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToCoTaskMemAuto(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToCoTaskMemUTF8(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToCoTaskMemUni(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToHGlobalAnsi(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToHGlobalAuto(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.IntPtr System.Runtime.InteropServices.Marshal.StringToHGlobalUni(System.String) | [NullableContextAttribute(...)] | 0 | 2 | | System.IntPtr System.Threading.WaitHandle.Handle | [ObsoleteAttribute(...)] | 0 | WaitHandleHandle has been deprecated. Use the SafeWaitHandle property instead. | | System.InvalidCastException | [NullableAttribute(...)] | 0 | 0 | | System.InvalidCastException | [NullableContextAttribute(...)] | 0 | 2 | @@ -2292,10 +7632,26 @@ attrArgPositional | System.MemberAccessException | [NullableAttribute(...)] | 0 | 0 | | System.MemberAccessException | [NullableContextAttribute(...)] | 0 | 2 | | System.MemberAccessException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Memory | [NullableAttribute(...)] | 0 | [0,1] | | System.Memory System.Buffers.IMemoryOwner`1.Memory | [NullableAttribute(...)] | 0 | [0,1] | | System.Memory System.Buffers.MemoryManager`1.Memory | [NullableAttribute(...)] | 0 | [0,1] | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Index) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.AsMemory`1(!0[],System.Range) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.AsMemory`1(System.ArraySegment) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.AsMemory`1(System.ArraySegment,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.AsMemory`1(System.ArraySegment,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.MemoryExtensions.TrimEnd`1(System.Memory,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Memory System.MemoryExtensions.TrimStart`1(System.Memory,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Memory System.MemoryExtensions.Trim`1(System.Memory,!0) | [NullableContextAttribute(...)] | 0 | 1 | | System.Memory System.Memory`1.Empty | [NullableAttribute(...)] | 0 | [0,1] | +| System.Memory System.Runtime.InteropServices.MemoryMarshal.AsMemory`1(System.ReadOnlyMemory) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Memory System.Runtime.InteropServices.MemoryMarshal.CreateFromPinnedArray`1(!0[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | | System.MemoryExtensions.TryWriteInterpolatedStringHandler | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.MemoryExtensions.TryWriteInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | [destination,provider] | +| System.MemoryExtensions.TryWriteInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | destination | | System.MemoryExtensions.TryWriteInterpolatedStringHandler | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.MemoryExtensions.TryWriteInterpolatedStringHandler | [ObsoleteAttribute(...)] | 1 | True | | System.Memory`1 | [DebuggerDisplayAttribute(...)] | 0 | {ToString(),raw} | @@ -2347,10 +7703,140 @@ attrArgPositional | System.Number.DiyFp | [ObsoleteAttribute(...)] | 1 | True | | System.Number.NumberBuffer | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.Number.NumberBuffer | [ObsoleteAttribute(...)] | 1 | True | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.ConvertToDouble(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.AsVectorSByte`1(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.ConvertToSingle(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.AsVectorUInt16`1(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.AsVectorUInt32`1(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.ConvertToUInt32(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.Narrow(System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.AsVectorUInt64`1(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.ConvertToUInt64(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector.AsVectorNUInt`1(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Numerics.Vector System.Numerics.Vector`1.op_Explicit(System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | | System.Numerics.Vector`1 | [DefaultMemberAttribute(...)] | 0 | Item | +| System.Object Internal.Runtime.InteropServices.ComActivator.GetClassFactoryForType(Internal.Runtime.InteropServices.ComActivationContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Activator.CreateInstance(System.Type,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Activator.CreateInstance(System.Type,System.Object[],System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Activator.CreateInstance(System.Type,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Activator.CreateInstance(System.Type,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.AppContext.GetData(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.AppDomain.CreateInstanceAndUnwrap(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Object System.AppDomain.CreateInstanceAndUnwrap(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.AppDomain.CreateInstanceAndUnwrap(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Object System.AppDomain.CreateInstanceAndUnwrap(System.String,System.String,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Object System.AppDomain.CreateInstanceFromAndUnwrap(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Object System.AppDomain.CreateInstanceFromAndUnwrap(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.AppDomain.CreateInstanceFromAndUnwrap(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Object System.AppDomain.CreateInstanceFromAndUnwrap(System.String,System.String,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Object System.Array.GetValue(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Array.GetValue(System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Array.GetValue(System.Int32,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Array.GetValue(System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Array.GetValue(System.Int64,System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Array.GetValue(System.Int64,System.Int64,System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.CharEnumerator.Clone() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Collections.ArrayList.get_Item(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Collections.DictionaryEntry.get_Value() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Collections.IDictionaryEnumerator.get_Value() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Delegate.DynamicInvoke(System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Delegate.DynamicInvokeImpl(System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Delegate.get_Target() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Enum.ToObject(System.Type,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Object System.Enum.ToObject(System.Type,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Object System.Enum.ToObject(System.Type,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Object System.Enum.ToObject(System.Type,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Object System.FormattableString.GetArgument(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Globalization.CultureInfo.GetFormat(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Globalization.DateTimeFormatInfo.GetFormat(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Globalization.NumberFormatInfo.GetFormat(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.IAsyncResult.get_AsyncState() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.IConvertible.ToType(System.Type,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.MarshalByRefObject.GetLifetimeService() | [ObsoleteAttribute(...)] | 0 | This Remoting API is not supported and throws PlatformNotSupportedException. | +| System.Object System.MarshalByRefObject.InitializeLifetimeService() | [ObsoleteAttribute(...)] | 0 | This Remoting API is not supported and throws PlatformNotSupportedException. | +| System.Object System.Object.MemberwiseClone() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Reflection.Assembly.CreateInstance(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Assembly.CreateInstance is not supported with trimming. Use Type.GetType instead. | +| System.Object System.Reflection.Assembly.CreateInstance(System.String,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Assembly.CreateInstance is not supported with trimming. Use Type.GetType instead. | +| System.Object System.Reflection.Assembly.CreateInstance(System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Assembly.CreateInstance(System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Assembly.CreateInstance is not supported with trimming. Use Type.GetType instead. | +| System.Object System.Reflection.AssemblyName.Clone() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Reflection.ConstructorInfo.Invoke(System.Object[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Reflection.CustomAttributeTypedArgument.get_Value() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.ConstructorBuilder.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.ConstructorBuilder.Invoke(System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.DynamicMethod.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.EnumBuilder.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.Emit.EnumBuilder.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.FieldBuilder.GetValue(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.GenericTypeParameterBuilder.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.Emit.GenericTypeParameterBuilder.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.MethodBuilder.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.PropertyBuilder.GetValue(System.Object,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.PropertyBuilder.GetValue(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.SymbolType.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.Emit.TypeBuilder.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.Emit.TypeBuilder.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Emit.TypeBuilderInstantiation.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.FieldInfo.GetValueDirect(System.TypedReference) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Object System.Reflection.IReflect.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.IReflect.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.ParameterInfo.get_DefaultValue() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.ParameterInfo.get_RawDefaultValue() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Reflection.Pointer.Box(System.Void*,System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Reflection.RuntimeConstructorInfo.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Object System.Reflection.RuntimeConstructorInfo.Invoke(System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2059:RunClassConstructor | +| System.Object System.Reflection.SignatureType.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.TypeDelegator.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Reflection.TypeDelegator.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Resources.ResourceManager.GetObject(System.String,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Resources.ResourceReader.DeserializeObject(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Object System.Resources.ResourceReader.DeserializeObject(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Object System.Runtime.CompilerServices.RuntimeHelpers.GetObjectValue(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Runtime.InteropServices.ComWrappers.CreateObject(System.IntPtr,System.Runtime.InteropServices.CreateObjectFlags) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Runtime.InteropServices.Marshal.BindToMoniker(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Built-in COM support is not trim compatible | +| System.Object System.Runtime.InteropServices.Marshal.BindToMoniker(System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Object System.Runtime.InteropServices.Marshal.CreateWrapperOfType(System.Object,System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Runtime.InteropServices.Marshal.CreateWrapperOfType(System.Object,System.Type) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Object System.Runtime.InteropServices.Marshal.GetComObjectData(System.Object,System.Object) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Object System.Runtime.InteropServices.Marshal.GetObjectForIUnknown(System.IntPtr) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Object System.Runtime.InteropServices.Marshal.GetObjectForNativeVariant(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Runtime.InteropServices.Marshal.GetObjectForNativeVariant(System.IntPtr) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Object System.Runtime.InteropServices.Marshal.GetTypedObjectForIUnknown(System.IntPtr,System.Type) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Object System.Runtime.InteropServices.Marshal.GetUniqueObjectForIUnknown(System.IntPtr) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Object System.Runtime.Serialization.SerializationEntry.get_Value() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Runtime.Serialization.SerializationInfoEnumerator.get_Value() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.RuntimeType.CreateInstanceImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Object System.RuntimeType.CreateInstanceImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2082:UnrecognizedReflectionPattern | +| System.Object System.RuntimeType.CreateInstanceImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2085:UnrecognizedReflectionPattern | +| System.Object System.RuntimeType.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Security.PermissionSet.get_SyncRoot() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Threading.Interlocked.CompareExchange(System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Threading.Interlocked.Exchange(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Threading.Tasks.Task.get_AsyncState() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Threading.Thread.VolatileRead(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Threading.ThreadPoolBoundHandle.GetNativeOverlappedState(System.Threading.NativeOverlapped*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Globalization.CultureInfo) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Object System.Type.InvokeMember(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object,System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Object System.UnitySerializationHolder.GetRealObject(System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Object System.Version.Clone() | [NullableContextAttribute(...)] | 0 | 1 | | System.ObjectDisposedException | [NullableAttribute(...)] | 0 | 0 | | System.ObjectDisposedException | [NullableContextAttribute(...)] | 0 | 1 | | System.ObjectDisposedException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Object[] System.Diagnostics.Tracing.EventSource.SerializeEventArgs(System.Int32,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Object[] System.Diagnostics.Tracing.EventSource.SerializeEventArgs(System.Int32,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Object[] System.Diagnostics.Tracing.EventSource.SerializeEventArgs(System.Int32,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Object[] System.Runtime.InteropServices.Marshal.GetObjectsForNativeVariants(System.IntPtr,System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | | System.ObsoleteAttribute | [AttributeUsageAttribute(...)] | 0 | 6140 | | System.ObsoleteAttribute | [NullableAttribute(...)] | 0 | 0 | | System.ObsoleteAttribute | [NullableContextAttribute(...)] | 0 | 2 | @@ -2386,20 +7872,43 @@ attrArgPositional | System.RankException | [NullableAttribute(...)] | 0 | 0 | | System.RankException | [NullableContextAttribute(...)] | 0 | 2 | | System.RankException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.ReadOnlyMemory | [NullableAttribute(...)] | 0 | [0,1] | +| System.ReadOnlyMemory System.MemoryExtensions.TrimEnd`1(System.ReadOnlyMemory,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.ReadOnlyMemory System.MemoryExtensions.TrimStart`1(System.ReadOnlyMemory,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.ReadOnlyMemory System.MemoryExtensions.Trim`1(System.ReadOnlyMemory,!0) | [NullableContextAttribute(...)] | 0 | 1 | | System.ReadOnlyMemory System.ReadOnlyMemory`1.Empty | [NullableAttribute(...)] | 0 | [0,1] | | System.ReadOnlyMemory`1 | [DebuggerDisplayAttribute(...)] | 0 | {ToString(),raw} | | System.ReadOnlyMemory`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.MemoryDebugView`1 | | System.ReadOnlyMemory`1 | [NullableAttribute(...)] | 0 | 0 | | System.ReadOnlyMemory`1 | [NullableContextAttribute(...)] | 0 | 1 | +| System.ReadOnlySpan | [NullableAttribute(...)] | 0 | [0,1] | +| System.ReadOnlySpan System.MemoryExtensions.TrimEnd`1(System.ReadOnlySpan,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.ReadOnlySpan System.MemoryExtensions.TrimStart`1(System.ReadOnlySpan,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.ReadOnlySpan System.MemoryExtensions.Trim`1(System.ReadOnlySpan,!0) | [NullableContextAttribute(...)] | 0 | 1 | | System.ReadOnlySpan System.ReadOnlyMemory`1.Span | [NullableAttribute(...)] | 0 | [0,1] | | System.ReadOnlySpan System.ReadOnlySpan`1.Empty | [NullableAttribute(...)] | 0 | [0,1] | +| System.ReadOnlySpan System.Runtime.InteropServices.MemoryMarshal.CreateReadOnlySpan`1(!0,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.ReadOnlySpan.Enumerator System.ReadOnlySpan`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 0 | | System.ReadOnlySpan System.Globalization.CompareInfo.HighCharTable | [NullableAttribute(...)] | 0 | 0 | | System.ReadOnlySpan System.Diagnostics.Tracing.EventSource.ProviderMetadata | [NullableAttribute(...)] | 0 | 0 | | System.ReadOnlySpan System.IO.Path.Base32Char | [NullableAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.Runtime.InteropServices.MemoryMarshal.CreateReadOnlySpanFromNullTerminated(System.Byte*) | [CLSCompliantAttribute(...)] | 0 | False | | System.ReadOnlySpan System.Text.Encoding.Preamble | [NullableAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.Text.Encoding.get_Preamble() | [NullableContextAttribute(...)] | 0 | 0 | | System.ReadOnlySpan System.Text.UTF32Encoding.Preamble | [NullableAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.Text.UTF32Encoding.get_Preamble() | [NullableContextAttribute(...)] | 0 | 0 | | System.ReadOnlySpan System.Text.UnicodeEncoding.Preamble | [NullableAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.Text.UnicodeEncoding.get_Preamble() | [NullableContextAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan | [NullableAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.IO.Path.GetDirectoryName(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.IO.Path.GetExtension(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.IO.Path.GetFileName(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.IO.Path.GetFileNameWithoutExtension(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.IO.Path.GetPathRoot(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.IO.Path.TrimEndingDirectorySeparator(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | | System.ReadOnlySpan System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.Text | [NullableAttribute(...)] | 0 | 0 | +| System.ReadOnlySpan System.Runtime.InteropServices.MemoryMarshal.CreateReadOnlySpanFromNullTerminated(System.Char*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.ReadOnlySpan System.String.op_Implicit(System.String) | [NullableContextAttribute(...)] | 0 | 0 | | System.ReadOnlySpan System.Convert.DecodingMap | [NullableAttribute(...)] | 0 | 0 | | System.ReadOnlySpan`1 | [DebuggerDisplayAttribute(...)] | 0 | {ToString(),raw} | | System.ReadOnlySpan`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.SpanDebugView`1 | @@ -2415,8 +7924,45 @@ attrArgPositional | System.Reflection.AmbiguousMatchException | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.AmbiguousMatchException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Reflection.Assembly | [NullableAttribute(...)] | 0 | 0 | +| System.Reflection.Assembly | [NullableAttribute(...)] | 0 | 1 | +| System.Reflection.Assembly | [NullableAttribute(...)] | 0 | 2 | | System.Reflection.Assembly | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.Assembly Internal.Runtime.InteropServices.IsolatedComponentLoadContext.Load(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.Assembly Internal.Runtime.InteropServices.IsolatedComponentLoadContext.Load(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Reflection.Assembly System.AppDomain.Load(System.Byte[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.AppDomain.Load(System.Byte[],System.Byte[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.GetEntryAssembly() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Assembly System.Reflection.Assembly.Load(System.Byte[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.Load(System.Byte[],System.Byte[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.LoadFile(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.LoadFrom(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.LoadFrom(System.String,System.Byte[],System.Configuration.Assemblies.AssemblyHashAlgorithm) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.LoadFromResolveHandler(System.Object,System.ResolveEventArgs) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.LoadFromResolveHandler(System.Object,System.ResolveEventArgs) | [UnconditionalSuppressMessageAttribute(...)] | 0 | SingleFile | +| System.Reflection.Assembly System.Reflection.Assembly.LoadFromResolveHandler(System.Object,System.ResolveEventArgs) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL3000:Avoid accessing Assembly file path when publishing as a single file | +| System.Reflection.Assembly System.Reflection.Assembly.LoadWithPartialName(System.String) | [ObsoleteAttribute(...)] | 0 | Assembly.LoadWithPartialName has been deprecated. Use Assembly.Load() instead. | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.Byte[]) | [ObsoleteAttribute(...)] | 0 | ReflectionOnly loading is not supported and throws PlatformNotSupportedException. | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.Byte[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.String) | [ObsoleteAttribute(...)] | 0 | ReflectionOnly loading is not supported and throws PlatformNotSupportedException. | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoad(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoadFrom(System.String) | [ObsoleteAttribute(...)] | 0 | ReflectionOnly loading is not supported and throws PlatformNotSupportedException. | +| System.Reflection.Assembly System.Reflection.Assembly.ReflectionOnlyLoadFrom(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Reflection.Assembly.UnsafeLoadFrom(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | | System.Reflection.Assembly System.ResolveEventArgs.RequestingAssembly | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.Assembly System.ResolveEventArgs.get_RequestingAssembly() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Assembly System.ResolveEventHandler.Invoke(System.Object,System.ResolveEventArgs) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.GetFirstResolvedAssemblyFromResolvingEvent(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 0 | SingleFile | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.GetFirstResolvedAssemblyFromResolvingEvent(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL3000: Avoid accessing Assembly file path when publishing as a single file | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.InternalLoad(System.ReadOnlySpan,System.ReadOnlySpan) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.InternalLoadFromPath(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.LoadFromAssemblyPath(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.LoadFromNativeImagePath(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.LoadFromStream(System.IO.Stream) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.LoadFromStream(System.IO.Stream,System.IO.Stream) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.ResolveSatelliteAssembly(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.ResolveSatelliteAssembly(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 0 | SingleFile | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.ResolveSatelliteAssembly(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Reflection.Assembly System.Runtime.Loader.AssemblyLoadContext.ResolveSatelliteAssembly(System.Reflection.AssemblyName) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL3000: Avoid accessing Assembly file path when publishing as a single file | | System.Reflection.Assembly.ModuleResolve | [NullableAttribute(...)] | 0 | 2 | | System.Reflection.AssemblyAlgorithmIdAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | | System.Reflection.AssemblyCompanyAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | @@ -2456,6 +8002,11 @@ attrArgPositional | System.Reflection.AssemblyMetadataAttribute | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.AssemblyName | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.AssemblyName | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.AssemblyName System.Reflection.AssemblyName.GetAssemblyName(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.AssemblyName System.Reflection.AssemblyNameProxy.GetAssemblyName(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.AssemblyName[] System.Reflection.Assembly.GetReferencedAssemblies() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Assembly references might be removed | +| System.Reflection.AssemblyName[] System.Reflection.Emit.AssemblyBuilder.GetReferencedAssemblies() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Assembly references might be removed | +| System.Reflection.AssemblyName[] System.Reflection.RuntimeAssembly.GetReferencedAssemblies() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Assembly references might be removed | | System.Reflection.AssemblyProductAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | | System.Reflection.AssemblyProductAttribute | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.AssemblyProductAttribute | [NullableContextAttribute(...)] | 0 | 1 | @@ -2472,14 +8023,48 @@ attrArgPositional | System.Reflection.AssemblyVersionAttribute | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.AssemblyVersionAttribute | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.Binder | [NullableAttribute(...)] | 0 | 0 | +| System.Reflection.Binder | [NullableAttribute(...)] | 0 | 2 | | System.Reflection.Binder | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.CerHashtable`2 | [DefaultMemberAttribute(...)] | 0 | Item | | System.Reflection.ConstArray | [DefaultMemberAttribute(...)] | 0 | Item | | System.Reflection.ConstructorInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.ConstructorInfo | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.ConstructorInfo System.Reflection.Emit.EnumBuilder.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Reflection.Emit.EnumBuilder.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.ConstructorInfo System.Reflection.Emit.GenericTypeParameterBuilder.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Reflection.Emit.SymbolType.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Reflection.Emit.TypeBuilder.GetConstructor(System.Type,System.Reflection.ConstructorInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.ConstructorInfo System.Reflection.Emit.TypeBuilder.GetConstructor(System.Type,System.Reflection.ConstructorInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2055:UnrecognizedReflectionPattern | +| System.Reflection.ConstructorInfo System.Reflection.Emit.TypeBuilder.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Reflection.Emit.TypeBuilder.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.ConstructorInfo System.Reflection.Emit.TypeBuilderInstantiation.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Reflection.SignatureType.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Reflection.TypeDelegator.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Reflection.TypeDelegator.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.ConstructorInfo System.RuntimeType.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Type.GetConstructor(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Type.GetConstructor(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.ConstructorInfo System.Type.GetConstructor(System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Type.GetConstructor(System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.ConstructorInfo System.Type.GetConstructor(System.Reflection.BindingFlags,System.Type[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Type.GetConstructor(System.Type[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 3 | +| System.Reflection.ConstructorInfo System.Type.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Type.GetConstructorImpl(System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.ConstructorInfo System.Type.TypeInitializer | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.ConstructorInfo System.Type.get_TypeInitializer() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo System.Type.get_TypeInitializer() | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.ConstructorInfo.ConstructorName | [NullableAttribute(...)] | 0 | 1 | | System.Reflection.ConstructorInfo.TypeConstructorName | [NullableAttribute(...)] | 0 | 1 | +| System.Reflection.ConstructorInfo[] System.Reflection.Emit.EnumBuilder.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.Reflection.Emit.SymbolType.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.Reflection.Emit.TypeBuilder.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.Reflection.SignatureType.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.Reflection.TypeDelegator.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.RuntimeType.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Reflection.ConstructorInfo[] System.Type.GetConstructors() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 3 | +| System.Reflection.ConstructorInfo[] System.Type.GetConstructors(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | | System.Reflection.CustomAttributeData | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.CustomAttributeData | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.CustomAttributeExtensions | [NullableAttribute(...)] | 0 | 0 | @@ -2498,6 +8083,13 @@ attrArgPositional | System.Reflection.Emit.AssemblyBuilder | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.Emit.ConstructorBuilder | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.ConstructorBuilder | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineConstructorNoLock(System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type[],System.Type[][],System.Type[][]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineConstructorNoLock(System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type[],System.Type[][],System.Type[][]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2082:UnrecognizedReflectionPattern | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineDefaultConstructorNoLock(System.Reflection.MethodAttributes) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineDefaultConstructorNoLock(System.Reflection.MethodAttributes) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2055:UnrecognizedReflectionPattern | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineDefaultConstructorNoLock(System.Reflection.MethodAttributes) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineTypeInitializerNoLock() | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.Emit.ConstructorBuilder System.Reflection.Emit.TypeBuilder.DefineTypeInitializerNoLock() | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2082:UnrecognizedReflectionPattern | | System.Reflection.Emit.CustomAttributeBuilder | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.CustomAttributeBuilder | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.Emit.DynamicILInfo | [NullableAttribute(...)] | 0 | 0 | @@ -2521,6 +8113,14 @@ attrArgPositional | System.Reflection.Emit.LocalBuilder | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.Emit.MethodBuilder | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.MethodBuilder | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.ModuleBuilder.DefinePInvokeMethod(System.String,System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Runtime.InteropServices.CallingConvention,System.Runtime.InteropServices.CharSet) | [RequiresUnreferencedCodeAttribute(...)] | 0 | P/Invoke marshalling may dynamically access members that could be trimmed. | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.ModuleBuilder.DefinePInvokeMethod(System.String,System.String,System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Runtime.InteropServices.CallingConvention,System.Runtime.InteropServices.CharSet) | [RequiresUnreferencedCodeAttribute(...)] | 0 | P/Invoke marshalling may dynamically access members that could be trimmed. | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.TypeBuilder.DefineMethodNoLock(System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.TypeBuilder.DefineMethodNoLock(System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2082:UnrecognizedReflectionPattern | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.TypeBuilder.DefinePInvokeMethod(System.String,System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Runtime.InteropServices.CallingConvention,System.Runtime.InteropServices.CharSet) | [RequiresUnreferencedCodeAttribute(...)] | 0 | P/Invoke marshalling may dynamically access members that could be trimmed. | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.TypeBuilder.DefinePInvokeMethod(System.String,System.String,System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Runtime.InteropServices.CallingConvention,System.Runtime.InteropServices.CharSet) | [RequiresUnreferencedCodeAttribute(...)] | 0 | P/Invoke marshalling may dynamically access members that could be trimmed. | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.TypeBuilder.DefinePInvokeMethod(System.String,System.String,System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][],System.Runtime.InteropServices.CallingConvention,System.Runtime.InteropServices.CharSet) | [RequiresUnreferencedCodeAttribute(...)] | 0 | P/Invoke marshalling may dynamically access members that could be trimmed. | +| System.Reflection.Emit.MethodBuilder System.Reflection.Emit.TypeBuilder.DefinePInvokeMethodHelper(System.String,System.String,System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][],System.Runtime.InteropServices.CallingConvention,System.Runtime.InteropServices.CharSet) | [RequiresUnreferencedCodeAttribute(...)] | 0 | P/Invoke marshalling may dynamically access members that could be trimmed. | | System.Reflection.Emit.MethodBuilder.m_containingType | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | | System.Reflection.Emit.ModuleBuilder | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.ModuleBuilder | [NullableContextAttribute(...)] | 0 | 1 | @@ -2530,10 +8130,17 @@ attrArgPositional | System.Reflection.Emit.OperandType.InlinePhi | [ObsoleteAttribute(...)] | 0 | OperandType.InlinePhi has been deprecated and is not supported. | | System.Reflection.Emit.ParameterBuilder | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.ParameterBuilder | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Emit.ParameterBuilder System.Reflection.Emit.DynamicMethod.DefineParameter(System.Int32,System.Reflection.ParameterAttributes,System.String) | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.Emit.PropertyBuilder | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.PropertyBuilder | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.Emit.SignatureHelper | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.SignatureHelper | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.Emit.SignatureHelper System.Reflection.Emit.SignatureHelper.GetMethodSigHelper(System.Reflection.Module,System.Reflection.CallingConventions,System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Emit.SignatureHelper System.Reflection.Emit.SignatureHelper.GetMethodSigHelper(System.Reflection.Module,System.Type,System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Emit.SignatureHelper System.Reflection.Emit.SignatureHelper.GetPropertySigHelper(System.Reflection.Module,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Emit.SignatureHelper System.Reflection.Emit.SignatureHelper.GetPropertySigHelper(System.Reflection.Module,System.Type,System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Emit.SignatureHelper System.Reflection.Emit.SignatureHelper.GetPropertySigHelper(System.Reflection.Module,System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.Emit.TypeBuilder | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | | System.Reflection.Emit.TypeBuilder | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Emit.TypeBuilder | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.Emit.TypeBuilder.m_bakedRuntimeType | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | @@ -2541,10 +8148,85 @@ attrArgPositional | System.Reflection.Emit.__ExceptionInfo[] System.Reflection.Emit.ILGenerator.CurrExcStack | [NullableAttribute(...)] | 0 | [2,1] | | System.Reflection.EventInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.EventInfo | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.EventInfo System.Attribute.GetParentDefinition(System.Reflection.EventInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.EventInfo System.Attribute.GetParentDefinition(System.Reflection.EventInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Reflection.EventInfo System.Reflection.Emit.EnumBuilder.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Reflection.Emit.GenericTypeParameterBuilder.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Reflection.Emit.SymbolType.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Reflection.Emit.TypeBuilder.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Reflection.Emit.TypeBuilderInstantiation.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Reflection.SignatureType.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Reflection.TypeDelegator.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Reflection.TypeInfo.GetDeclaredEvent(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.RuntimeType.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo System.Type.GetEvent(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo System.Type.GetEvent(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Reflection.Emit.EnumBuilder.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Reflection.Emit.EnumBuilder.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Reflection.Emit.SymbolType.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Reflection.Emit.SymbolType.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Reflection.Emit.TypeBuilder.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Reflection.Emit.TypeBuilder.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Reflection.SignatureType.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Reflection.SignatureType.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Reflection.TypeDelegator.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Reflection.TypeDelegator.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.RuntimeType.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Reflection.EventInfo[] System.Type.GetEvents() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Reflection.EventInfo[] System.Type.GetEvents(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | | System.Reflection.ExceptionHandlingClause | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.ExceptionHandlingClause | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.FieldInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.FieldInfo | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.FieldInfo System.Reflection.Emit.EnumBuilder.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.Emit.GenericTypeParameterBuilder.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.Emit.ModuleBuilder.GetField(System.String,System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo System.Reflection.Emit.ModuleBuilder.ResolveField(System.Int32,System.Type[],System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.FieldInfo System.Reflection.Emit.ModuleBuilder.ResolveField(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.FieldInfo System.Reflection.Emit.SymbolType.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.Emit.TypeBuilder.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.Emit.TypeBuilder.GetField(System.Type,System.Reflection.FieldInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.FieldInfo System.Reflection.Emit.TypeBuilder.GetField(System.Type,System.Reflection.FieldInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2055:UnrecognizedReflectionPattern | +| System.Reflection.FieldInfo System.Reflection.Emit.TypeBuilderInstantiation.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.FieldInfo.GetFieldFromHandle(System.RuntimeFieldHandle) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.FieldInfo System.Reflection.FieldInfo.GetFieldFromHandle(System.RuntimeFieldHandle,System.RuntimeTypeHandle) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.FieldInfo System.Reflection.IReflect.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.Module.GetField(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo System.Reflection.Module.GetField(System.String,System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo System.Reflection.Module.ResolveField(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.FieldInfo System.Reflection.Module.ResolveField(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.FieldInfo System.Reflection.Module.ResolveField(System.Int32,System.Type[],System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.FieldInfo System.Reflection.Module.ResolveField(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.FieldInfo System.Reflection.RuntimeModule.GetField(System.String,System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo System.Reflection.RuntimeModule.ResolveField(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.FieldInfo System.Reflection.RuntimeModule.ResolveLiteralField(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.FieldInfo System.Reflection.SignatureType.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.TypeDelegator.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Reflection.TypeInfo.GetDeclaredField(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.RuntimeType.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo System.Type.GetField(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 32 | +| System.Reflection.FieldInfo System.Type.GetField(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Diagnostics.Tracing.ManifestBuilder.g__GetEnumFields\|18_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.FieldInfo[] System.Diagnostics.Tracing.ManifestBuilder.g__GetEnumFields\|18_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | +| System.Reflection.FieldInfo[] System.Reflection.Emit.EnumBuilder.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Reflection.Emit.ModuleBuilder.GetFields(System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo[] System.Reflection.Emit.SymbolType.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Reflection.Emit.TypeBuilder.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Reflection.IReflect.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Reflection.Module.GetFields() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo[] System.Reflection.Module.GetFields(System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo[] System.Reflection.RuntimeModule.GetFields(System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Fields might be removed | +| System.Reflection.FieldInfo[] System.Reflection.SignatureType.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Reflection.TypeDelegator.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.RuntimeType.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Reflection.FieldInfo[] System.Type.GetFields() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 32 | +| System.Reflection.FieldInfo[] System.Type.GetFields(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | | System.Reflection.ICustomAttributeProvider | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.IReflect | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.IReflectableType | [NullableContextAttribute(...)] | 0 | 1 | @@ -2558,7 +8240,47 @@ attrArgPositional | System.Reflection.ManifestResourceInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.ManifestResourceInfo | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.MemberInfo | [NullableAttribute(...)] | 0 | 0 | +| System.Reflection.MemberInfo | [NullableAttribute(...)] | 0 | 1 | | System.Reflection.MemberInfo | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.MemberInfo System.Reflection.Emit.ModuleBuilder.ResolveMember(System.Int32,System.Type[],System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MemberInfo System.Reflection.Emit.ModuleBuilder.ResolveMember(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MemberInfo System.Reflection.Module.ResolveMember(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MemberInfo System.Reflection.Module.ResolveMember(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MemberInfo System.Reflection.Module.ResolveMember(System.Int32,System.Type[],System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MemberInfo System.Reflection.Module.ResolveMember(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MemberInfo System.Reflection.RuntimeModule.ResolveMember(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MemberInfo System.Type.GetMemberWithSameMetadataDefinitionAs(System.Reflection.MemberInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.MemberInfo System.Type.GetMemberWithSameMetadataDefinitionAs(System.Reflection.MemberInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2085:UnrecognizedReflectionPattern | +| System.Reflection.MemberInfo[] System.Reflection.Emit.EnumBuilder.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.EnumBuilder.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.SymbolType.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.SymbolType.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.TypeBuilder.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.TypeBuilder.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.IReflect.GetMember(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.IReflect.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.SignatureType.FindMembers(System.Reflection.MemberTypes,System.Reflection.BindingFlags,System.Reflection.MemberFilter,System.Object) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Reflection.MemberInfo[] System.Reflection.SignatureType.GetDefaultMembers() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2731 | +| System.Reflection.MemberInfo[] System.Reflection.SignatureType.GetMember(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.SignatureType.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.SignatureType.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.TypeDelegator.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Reflection.TypeDelegator.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.RuntimeType.GetDefaultMembers() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2731 | +| System.Reflection.MemberInfo[] System.RuntimeType.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.RuntimeType.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Type.FindMembers(System.Reflection.MemberTypes,System.Reflection.BindingFlags,System.Reflection.MemberFilter,System.Object) | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Reflection.MemberInfo[] System.Type.FindMembers(System.Reflection.MemberTypes,System.Reflection.BindingFlags,System.Reflection.MemberFilter,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MemberInfo[] System.Type.GetDefaultMembers() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2731 | +| System.Reflection.MemberInfo[] System.Type.GetMember(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2731 | +| System.Reflection.MemberInfo[] System.Type.GetMember(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Type.GetMember(System.String,System.Reflection.MemberTypes,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | +| System.Reflection.MemberInfo[] System.Type.GetMembers() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2731 | +| System.Reflection.MemberInfo[] System.Type.GetMembers(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8191 | | System.Reflection.Metadata.MetadataUpdateHandlerAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | | System.Reflection.Metadata.MetadataUpdateHandlerAttribute | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.Metadata.MetadataUpdateHandlerAttribute | [NullableContextAttribute(...)] | 0 | 1 | @@ -2567,21 +8289,126 @@ attrArgPositional | System.Reflection.MetadataEnumResult.smallResult | [FixedBufferAttribute(...)] | 1 | 16 | | System.Reflection.MethodBase | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.MethodBase | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Binder.BindToMethod(System.Reflection.BindingFlags,System.Reflection.MethodBase[],System.Object[],System.Reflection.ParameterModifier[],System.Globalization.CultureInfo,System.String[],System.Object) | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.MethodBase System.Reflection.Emit.GenericTypeParameterBuilder.DeclaringMethod | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Emit.GenericTypeParameterBuilder.get_DeclaringMethod() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Emit.ModuleBuilder.GetGenericMethodBaseDefinition(System.Reflection.MethodBase) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.MethodBase System.Reflection.Emit.ModuleBuilder.GetGenericMethodBaseDefinition(System.Reflection.MethodBase) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Reflection.MethodBase System.Reflection.Emit.ModuleBuilder.ResolveMethod(System.Int32,System.Type[],System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Emit.ModuleBuilder.ResolveMethod(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | | System.Reflection.MethodBase System.Reflection.Emit.TypeBuilder.DeclaringMethod | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Emit.TypeBuilder.get_DeclaringMethod() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Module.ResolveMethod(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Module.ResolveMethod(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MethodBase System.Reflection.Module.ResolveMethod(System.Int32,System.Type[],System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Reflection.Module.ResolveMethod(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MethodBase System.Reflection.RuntimeModule.ResolveMethod(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MethodBase System.RuntimeType.GetMethodBase(System.Reflection.RuntimeModule,System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Reflection.MethodBase System.RuntimeType.GetMethodBase(System.RuntimeType,System.RuntimeMethodHandleInternal) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.MethodBase System.RuntimeType.GetMethodBase(System.RuntimeType,System.RuntimeMethodHandleInternal) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | | System.Reflection.MethodBase System.Type.DeclaringMethod | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase System.Type.get_DeclaringMethod() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodBase[] | [NullableAttribute(...)] | 0 | 1 | | System.Reflection.MethodBody | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.MethodBody | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.MethodBody System.Reflection.MethodBase.GetMethodBody() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming may change method bodies. For example it can change some instructions, remove branches or local variables. | +| System.Reflection.MethodBody System.Reflection.RuntimeConstructorInfo.GetMethodBody() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming may change method bodies. For example it can change some instructions, remove branches or local variables. | +| System.Reflection.MethodBody System.Reflection.RuntimeMethodInfo.GetMethodBody() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming may change method bodies. For example it can change some instructions, remove branches or local variables. | | System.Reflection.MethodInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.MethodInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.MethodInfo System.Reflection.Assembly.EntryPoint | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Assembly.get_EntryPoint() | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.MethodInfo System.Reflection.Emit.AssemblyBuilder.EntryPoint | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Emit.AssemblyBuilder.get_EntryPoint() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Emit.EnumBuilder.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.Emit.EnumBuilder.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Emit.GenericTypeParameterBuilder.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.Emit.MethodBuilder.MakeGenericMethod(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Reflection.MethodInfo System.Reflection.Emit.MethodBuilderInstantiation.MakeGenericMethod(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Reflection.MethodInfo System.Reflection.Emit.MethodOnTypeBuilderInstantiation.MakeGenericMethod(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Reflection.MethodInfo System.Reflection.Emit.ModuleBuilder.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Emit.ModuleBuilder.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo System.Reflection.Emit.PropertyBuilder.GetGetMethod(System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Emit.PropertyBuilder.GetSetMethod(System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Emit.SymbolType.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.Emit.TypeBuilder.GetMethod(System.Type,System.Reflection.MethodInfo) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.MethodInfo System.Reflection.Emit.TypeBuilder.GetMethod(System.Type,System.Reflection.MethodInfo) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2055:UnrecognizedReflectionPattern | +| System.Reflection.MethodInfo System.Reflection.Emit.TypeBuilder.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.Emit.TypeBuilder.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Emit.TypeBuilderInstantiation.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.IReflect.GetMethod(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.IReflect.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.IReflect.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.MethodInfo.MakeGenericMethod(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Reflection.MethodInfo System.Reflection.Module.GetMethod(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo System.Reflection.Module.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Module.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo System.Reflection.Module.GetMethod(System.String,System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo System.Reflection.Module.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.Module.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo System.Reflection.RuntimeMethodInfo.MakeGenericMethod(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Reflection.MethodInfo System.Reflection.RuntimeModule.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed because Module methods can't currently be annotated for dynamic access. | +| System.Reflection.MethodInfo System.Reflection.RuntimeModule.GetMethodInternal(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed because Module methods can't currently be annotated for dynamic access. | +| System.Reflection.MethodInfo System.Reflection.SignatureType.GetMethodImpl(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.SignatureType.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.TypeDelegator.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Reflection.TypeDelegator.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Reflection.TypeInfo.GetDeclaredMethod(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.RuntimeType.GetMethodImpl(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.RuntimeType.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Int32,System.Type[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Int32,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Reflection.BindingFlags,System.Type[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Type[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Reflection.MethodInfo System.Type.GetMethod(System.String,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Reflection.MethodInfo System.Type.GetMethodImpl(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethodImpl(System.String,System.Int32,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo System.Type.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo System.Type.GetMethodImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Reflection.CallingConventions,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.MethodInfo[] System.Diagnostics.StackTrace.g__GetDeclaredMethods\|28_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.MethodInfo[] System.Diagnostics.StackTrace.g__GetDeclaredMethods\|28_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | +| System.Reflection.MethodInfo[] System.Reflection.Emit.EnumBuilder.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.Emit.ModuleBuilder.GetMethods(System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo[] System.Reflection.Emit.SymbolType.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.Emit.TypeBuilder.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.EventInfo.GetOtherMethods() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.MethodInfo[] System.Reflection.EventInfo.GetOtherMethods(System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.MethodInfo[] System.Reflection.IReflect.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.Module.GetMethods() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo[] System.Reflection.Module.GetMethods(System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo[] System.Reflection.PropertyInfo.GetAccessors() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.MethodInfo[] System.Reflection.PropertyInfo.GetAccessors(System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.MethodInfo[] System.Reflection.RuntimeModule.GetMethods(System.Reflection.BindingFlags) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Methods might be removed | +| System.Reflection.MethodInfo[] System.Reflection.SignatureType.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.TypeDelegator.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Reflection.TypeInfo.g__GetDeclaredOnlyMethods\|10_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.MethodInfo[] System.Reflection.TypeInfo.g__GetDeclaredOnlyMethods\|10_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | +| System.Reflection.MethodInfo[] System.RuntimeType.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Reflection.MethodInfo[] System.Type.GetMethods() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Reflection.MethodInfo[] System.Type.GetMethods(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | | System.Reflection.Missing.Value | [NullableAttribute(...)] | 0 | 1 | | System.Reflection.Module | [NullableAttribute(...)] | 0 | 0 | +| System.Reflection.Module | [NullableAttribute(...)] | 0 | 2 | | System.Reflection.Module | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.Module System.Reflection.Assembly.LoadModule(System.String,System.Byte[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded module depends on might be removed | +| System.Reflection.Module System.Reflection.Assembly.LoadModule(System.String,System.Byte[],System.Byte[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded module depends on might be removed | +| System.Reflection.Module System.Reflection.ModuleResolveEventHandler.Invoke(System.Object,System.ResolveEventArgs) | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.NullabilityInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.NullabilityInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.NullabilityInfo System.Reflection.NullabilityInfo.ElementType | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.NullabilityInfo System.Reflection.NullabilityInfo.get_ElementType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Reflection.NullabilityInfoContext | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.NullabilityInfoContext | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.ObfuscateAssemblyAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | @@ -2593,15 +8420,69 @@ attrArgPositional | System.Reflection.ParameterInfo.ClassImpl | [NullableAttribute(...)] | 0 | 2 | | System.Reflection.ParameterInfo.DefaultValueImpl | [NullableAttribute(...)] | 0 | 2 | | System.Reflection.ParameterInfo.NameImpl | [NullableAttribute(...)] | 0 | 2 | +| System.Reflection.ParameterInfo[] System.Reflection.MethodBase.GetParameters() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.ParameterInfo[] System.Reflection.PropertyInfo.GetIndexParameters() | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.ParameterModifier | [DefaultMemberAttribute(...)] | 0 | Item | +| System.Reflection.ParameterModifier[] | [NullableAttribute(...)] | 0 | 2 | | System.Reflection.Pointer | [CLSCompliantAttribute(...)] | 0 | False | | System.Reflection.PropertyInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.PropertyInfo | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Attribute.GetParentDefinition(System.Reflection.PropertyInfo,System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.PropertyInfo System.Attribute.GetParentDefinition(System.Reflection.PropertyInfo,System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Reflection.PropertyInfo System.Reflection.Binder.SelectProperty(System.Reflection.BindingFlags,System.Reflection.PropertyInfo[],System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Reflection.Emit.EnumBuilder.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.Emit.EnumBuilder.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Reflection.Emit.GenericTypeParameterBuilder.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.Emit.GenericTypeParameterBuilder.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Reflection.Emit.SymbolType.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.Emit.TypeBuilder.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.Emit.TypeBuilder.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Reflection.Emit.TypeBuilderInstantiation.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.IReflect.GetProperty(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.IReflect.GetProperty(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.IReflect.GetProperty(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Reflection.SignatureType.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.TypeDelegator.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Reflection.TypeDelegator.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Reflection.TypeInfo.GetDeclaredProperty(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.RuntimeType.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 512 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 512 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2085:UnrecognizedReflectionPattern | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type,System.Type[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 512 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 512 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo System.Type.GetProperty(System.String,System.Type[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 512 | +| System.Reflection.PropertyInfo System.Type.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo System.Type.GetPropertyImpl(System.String,System.Reflection.BindingFlags,System.Reflection.Binder,System.Type,System.Type[],System.Reflection.ParameterModifier[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.PropertyInfo[] | [NullableAttribute(...)] | 0 | 1 | +| System.Reflection.PropertyInfo[] System.Reflection.Emit.EnumBuilder.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Reflection.Emit.GenericTypeParameterBuilder.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Reflection.Emit.SymbolType.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Reflection.Emit.TypeBuilder.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Reflection.Emit.TypeBuilderInstantiation.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Reflection.IReflect.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Reflection.SignatureType.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Reflection.TypeDelegator.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.RuntimeType.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Reflection.PropertyInfo[] System.Type.GetProperties() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 512 | +| System.Reflection.PropertyInfo[] System.Type.GetProperties(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | | System.Reflection.ReflectionContext | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.ReflectionContext | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.ReflectionTypeLoadException | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.ReflectionTypeLoadException | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.ReflectionTypeLoadException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Reflection.RuntimeAssembly System.Runtime.Loader.AssemblyLoadContext.InvokeResolveEvent(System.ResolveEventHandler,System.Reflection.RuntimeAssembly,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | SingleFile | +| System.Reflection.RuntimeAssembly System.Runtime.Loader.AssemblyLoadContext.InvokeResolveEvent(System.ResolveEventHandler,System.Reflection.RuntimeAssembly,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL3000: Avoid accessing Assembly file path when publishing as a single file | +| System.Reflection.RuntimeFieldInfo[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateFields(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.RuntimeFieldInfo[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateFields(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Reflection.RuntimeMethodInfo System.Reflection.Associates.AssignAssociates(System.Int32,System.RuntimeType,System.RuntimeType) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.RuntimeMethodInfo System.Reflection.Associates.AssignAssociates(System.Int32,System.RuntimeType,System.RuntimeType) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | | System.Reflection.RuntimeReflectionExtensions | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.RuntimeReflectionExtensions | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.StrongNameKeyPair | [NullableAttribute(...)] | 0 | 0 | @@ -2620,9 +8501,17 @@ attrArgPositional | System.Reflection.TypeDelegator | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.TypeDelegator | [NullableContextAttribute(...)] | 0 | 1 | | System.Reflection.TypeDelegator.typeImpl | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Reflection.TypeInfo | [NotNullWhenAttribute(...)] | 0 | True | | System.Reflection.TypeInfo | [NullableAttribute(...)] | 0 | 0 | | System.Reflection.TypeInfo | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.TypeInfo System.Reflection.Emit.EnumBuilder.CreateTypeInfo() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.TypeInfo System.Reflection.Emit.TypeBuilder.CreateTypeInfo() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Reflection.TypeInfo System.Reflection.Emit.TypeBuilder.CreateTypeNoLock() | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Reflection.TypeInfo System.Reflection.Emit.TypeBuilder.CreateTypeNoLock() | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2083:UnrecognizedReflectionPattern | +| System.Reflection.TypeInfo System.Reflection.IntrospectionExtensions.GetTypeInfo(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Reflection.TypeInfo System.Reflection.TypeInfo.GetDeclaredNestedType(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | | System.ResolveEventArgs | [NullableAttribute(...)] | 0 | 0 | +| System.ResolveEventArgs | [NullableAttribute(...)] | 0 | 1 | | System.ResolveEventArgs | [NullableContextAttribute(...)] | 0 | 1 | | System.Resources.MissingManifestResourceException | [NullableAttribute(...)] | 0 | 0 | | System.Resources.MissingManifestResourceException | [NullableContextAttribute(...)] | 0 | 2 | @@ -2640,6 +8529,7 @@ attrArgPositional | System.Resources.ResourceReader.s_binaryFormatterType | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1 | | System.Resources.ResourceSet | [NullableAttribute(...)] | 0 | 0 | | System.Resources.ResourceSet | [NullableContextAttribute(...)] | 0 | 1 | +| System.Resources.ResourceSet System.Resources.ManifestBasedResourceGroveler.InternalGetResourceSetFromSerializedData(System.IO.Stream,System.String,System.String,System.Resources.ResourceManager.ResourceManagerMediator) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The CustomResourceTypesSupport feature switch has been enabled for this app which is being trimmed. Custom readers as well as custom objects on the resources file are not observable by the trimmer and so required assemblies, types and members may be removed. | | System.Resources.SatelliteContractVersionAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | | System.Resources.SatelliteContractVersionAttribute | [NullableAttribute(...)] | 0 | 0 | | System.Resources.SatelliteContractVersionAttribute | [NullableContextAttribute(...)] | 0 | 1 | @@ -2679,6 +8569,7 @@ attrArgPositional | System.Runtime.CompilerServices.CompilationRelaxationsAttribute | [AttributeUsageAttribute(...)] | 0 | 71 | | System.Runtime.CompilerServices.CompilerGeneratedAttribute | [AttributeUsageAttribute(...)] | 0 | 32767 | | System.Runtime.CompilerServices.CompilerGlobalScopeAttribute | [AttributeUsageAttribute(...)] | 0 | 4 | +| System.Runtime.CompilerServices.ConditionalWeakTable.CreateValueCallback | [NullableAttribute(...)] | 0 | [1,0,0] | | System.Runtime.CompilerServices.ConditionalWeakTable`2 | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.CompilerServices.ConditionalWeakTable`2 | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.CompilerServices.ConditionalWeakTable`2.CreateValueCallback | [NullableContextAttribute(...)] | 0 | 0 | @@ -2694,6 +8585,8 @@ attrArgPositional | System.Runtime.CompilerServices.DateTimeConstantAttribute | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.CompilerServices.DecimalConstantAttribute | [AttributeUsageAttribute(...)] | 0 | 2304 | | System.Runtime.CompilerServices.DefaultDependencyAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | +| System.Runtime.CompilerServices.DefaultInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | [provider,initialBuffer] | +| System.Runtime.CompilerServices.DefaultInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | provider | | System.Runtime.CompilerServices.DefaultInterpolatedStringHandler | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.CompilerServices.DefaultInterpolatedStringHandler | [NullableContextAttribute(...)] | 0 | 2 | | System.Runtime.CompilerServices.DefaultInterpolatedStringHandler | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | @@ -2840,6 +8733,7 @@ attrArgPositional | System.Runtime.InteropServices.ComTypes.EXCEPINFO | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.InteropServices.ComTypes.IBindCtx | [GuidAttribute(...)] | 0 | 0000000e-0000-0000-C000-000000000046 | | System.Runtime.InteropServices.ComTypes.IBindCtx | [InterfaceTypeAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.ComTypes.IBindCtx | [NullableAttribute(...)] | 0 | 1 | | System.Runtime.InteropServices.ComTypes.IBindCtx | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.InteropServices.ComTypes.IConnectionPoint | [GuidAttribute(...)] | 0 | B196B286-BAB4-101A-B69C-00AA00341D07 | | System.Runtime.InteropServices.ComTypes.IConnectionPoint | [InterfaceTypeAttribute(...)] | 0 | 1 | @@ -2866,6 +8760,7 @@ attrArgPositional | System.Runtime.InteropServices.ComTypes.IEnumerator | [GuidAttribute(...)] | 0 | 496B0ABF-CDEE-11d3-88E8-00902754C43A | | System.Runtime.InteropServices.ComTypes.IMoniker | [GuidAttribute(...)] | 0 | 0000000f-0000-0000-C000-000000000046 | | System.Runtime.InteropServices.ComTypes.IMoniker | [InterfaceTypeAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.ComTypes.IMoniker | [NullableAttribute(...)] | 0 | 2 | | System.Runtime.InteropServices.ComTypes.IMoniker | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.InteropServices.ComTypes.IPersistFile | [GuidAttribute(...)] | 0 | 0000010b-0000-0000-C000-000000000046 | | System.Runtime.InteropServices.ComTypes.IPersistFile | [InterfaceTypeAttribute(...)] | 0 | 1 | @@ -2902,7 +8797,9 @@ attrArgPositional | System.Runtime.InteropServices.ComWrappers | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | | System.Runtime.InteropServices.ComWrappers | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | | System.Runtime.InteropServices.ComWrappers.ComInterfaceDispatch | [NullableContextAttribute(...)] | 0 | 0 | +| System.Runtime.InteropServices.ComWrappers.ComInterfaceDispatch* | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.InteropServices.ComWrappers.ComInterfaceEntry | [NullableContextAttribute(...)] | 0 | 0 | +| System.Runtime.InteropServices.ComWrappers.ComInterfaceEntry* System.Runtime.InteropServices.ComWrappers.ComputeVtables(System.Object,System.Runtime.InteropServices.CreateComInterfaceFlags,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | | System.Runtime.InteropServices.DefaultCharSetAttribute | [AttributeUsageAttribute(...)] | 0 | 2 | | System.Runtime.InteropServices.DefaultDllImportSearchPathsAttribute | [AttributeUsageAttribute(...)] | 0 | 65 | | System.Runtime.InteropServices.DefaultParameterValueAttribute | [AttributeUsageAttribute(...)] | 0 | 2048 | @@ -2950,10 +8847,20 @@ attrArgPositional | System.Runtime.InteropServices.MarshalDirectiveException | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.InteropServices.MarshalDirectiveException | [NullableContextAttribute(...)] | 0 | 2 | | System.Runtime.InteropServices.MarshalDirectiveException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.InteropServices.NFloat System.Runtime.InteropServices.NFloat.op_Implicit(System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.InteropServices.NativeLibrary | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.InteropServices.NativeLibrary | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.InteropServices.ObjectiveC.ObjectiveCMarshal | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.InteropServices.ObjectiveC.ObjectiveCMarshal | [SupportedOSPlatformAttribute(...)] | 0 | macos | +| System.Runtime.InteropServices.ObjectiveC.ObjectiveCMarshal.UnhandledExceptionPropagationHandler | [NullableAttribute(...)] | 0 | 1 | | System.Runtime.InteropServices.ObjectiveC.ObjectiveCTrackedTypeAttribute | [AttributeUsageAttribute(...)] | 0 | 4 | | System.Runtime.InteropServices.ObjectiveC.ObjectiveCTrackedTypeAttribute | [SupportedOSPlatformAttribute(...)] | 0 | macos | | System.Runtime.InteropServices.OptionalAttribute | [AttributeUsageAttribute(...)] | 0 | 2048 | @@ -2964,6 +8871,11 @@ attrArgPositional | System.Runtime.InteropServices.PosixSignal.SIGTTIN | [UnsupportedOSPlatformAttribute(...)] | 0 | windows | | System.Runtime.InteropServices.PosixSignal.SIGTTOU | [UnsupportedOSPlatformAttribute(...)] | 0 | windows | | System.Runtime.InteropServices.PosixSignal.SIGWINCH | [UnsupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Runtime.InteropServices.PosixSignalRegistration System.Runtime.InteropServices.PosixSignalRegistration.Create(System.Runtime.InteropServices.PosixSignal,System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.PosixSignalRegistration System.Runtime.InteropServices.PosixSignalRegistration.Create(System.Runtime.InteropServices.PosixSignal,System.Action) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Runtime.InteropServices.PosixSignalRegistration System.Runtime.InteropServices.PosixSignalRegistration.Create(System.Runtime.InteropServices.PosixSignal,System.Action) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Runtime.InteropServices.PosixSignalRegistration System.Runtime.InteropServices.PosixSignalRegistration.Create(System.Runtime.InteropServices.PosixSignal,System.Action) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Runtime.InteropServices.PosixSignalRegistration System.Runtime.InteropServices.PosixSignalRegistration.Create(System.Runtime.InteropServices.PosixSignal,System.Action) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | | System.Runtime.InteropServices.PreserveSigAttribute | [AttributeUsageAttribute(...)] | 0 | 64 | | System.Runtime.InteropServices.ProgIdAttribute | [AttributeUsageAttribute(...)] | 0 | 4 | | System.Runtime.InteropServices.ProgIdAttribute | [NullableAttribute(...)] | 0 | 0 | @@ -2978,8 +8890,10 @@ attrArgPositional | System.Runtime.InteropServices.SafeArrayTypeMismatchException | [NullableContextAttribute(...)] | 0 | 2 | | System.Runtime.InteropServices.SafeArrayTypeMismatchException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Runtime.InteropServices.SafeHandle System.Threading.ThreadPoolBoundHandle.Handle | [NullableAttribute(...)] | 0 | 1 | +| System.Runtime.InteropServices.SafeHandle System.Threading.ThreadPoolBoundHandle.get_Handle() | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.InteropServices.StructLayoutAttribute | [AttributeUsageAttribute(...)] | 0 | 12 | | System.Runtime.InteropServices.StructLayoutAttribute System.Type.StructLayoutAttribute | [NullableAttribute(...)] | 0 | 2 | +| System.Runtime.InteropServices.StructLayoutAttribute System.Type.get_StructLayoutAttribute() | [NullableContextAttribute(...)] | 0 | 2 | | System.Runtime.InteropServices.SuppressGCTransitionAttribute | [AttributeUsageAttribute(...)] | 0 | 64 | | System.Runtime.InteropServices.TypeIdentifierAttribute | [AttributeUsageAttribute(...)] | 0 | 5144 | | System.Runtime.InteropServices.TypeIdentifierAttribute | [NullableAttribute(...)] | 0 | 0 | @@ -3002,10 +8916,76 @@ attrArgPositional | System.Runtime.Intrinsics.Arm.Rdm | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.Intrinsics.Arm.Sha1 | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.Intrinsics.Arm.Sha256 | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsSByte`1(System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalar(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt16`1(System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalar(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt32`1(System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalar(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalarUnsafe(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.AsUInt64`1(System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.Create(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector64 System.Runtime.Intrinsics.Vector64.CreateScalar(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.Intrinsics.Vector64`1 | [DebuggerDisplayAttribute(...)] | 0 | {DisplayString,nq} | | System.Runtime.Intrinsics.Vector64`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.Runtime.Intrinsics.Vector64DebugView`1 | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsSByte`1(System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalar(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt16`1(System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalar(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt32`1(System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt32,System.UInt32,System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalar(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.AsUInt64`1(System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.Runtime.Intrinsics.Vector64,System.Runtime.Intrinsics.Vector64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.Create(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalar(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector128 System.Runtime.Intrinsics.Vector128.CreateScalarUnsafe(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.Intrinsics.Vector128`1 | [DebuggerDisplayAttribute(...)] | 0 | {DisplayString,nq} | | System.Runtime.Intrinsics.Vector128`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.Runtime.Intrinsics.Vector128DebugView`1 | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsSByte`1(System.Runtime.Intrinsics.Vector256) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalar(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt16`1(System.Runtime.Intrinsics.Vector256) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalar(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt32`1(System.Runtime.Intrinsics.Vector256) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalar(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.AsUInt64`1(System.Runtime.Intrinsics.Vector256) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.Runtime.Intrinsics.Vector128,System.Runtime.Intrinsics.Vector128) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.Create(System.UInt64,System.UInt64,System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalar(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Runtime.Intrinsics.Vector256 System.Runtime.Intrinsics.Vector256.CreateScalarUnsafe(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.Intrinsics.Vector256`1 | [DebuggerDisplayAttribute(...)] | 0 | {DisplayString,nq} | | System.Runtime.Intrinsics.Vector256`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.Runtime.Intrinsics.Vector256DebugView`1 | | System.Runtime.Intrinsics.X86.Aes | [CLSCompliantAttribute(...)] | 0 | False | @@ -3034,10 +9014,12 @@ attrArgPositional | System.Runtime.Loader.AssemblyLoadContext | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.Loader.AssemblyLoadContext | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.Loader.AssemblyLoadContext System.Runtime.Loader.AssemblyLoadContext.CurrentContextualReflectionContext | [NullableAttribute(...)] | 0 | 2 | +| System.Runtime.Loader.AssemblyLoadContext System.Runtime.Loader.AssemblyLoadContext.get_CurrentContextualReflectionContext() | [NullableContextAttribute(...)] | 0 | 2 | | System.Runtime.Loader.AssemblyLoadContext.AssemblyLoad | [NullableAttribute(...)] | 0 | 2 | | System.Runtime.Loader.AssemblyLoadContext.AssemblyResolve | [NullableAttribute(...)] | 0 | 2 | | System.Runtime.Loader.AssemblyLoadContext.ContextualReflectionScope | [EditorBrowsableAttribute(...)] | 0 | 1 | | System.Runtime.Loader.AssemblyLoadContext.ContextualReflectionScope | [NullableContextAttribute(...)] | 0 | 0 | +| System.Runtime.Loader.AssemblyLoadContext.ContextualReflectionScope System.Runtime.Loader.AssemblyLoadContext.EnterContextualReflection(System.Reflection.Assembly) | [NullableContextAttribute(...)] | 0 | 2 | | System.Runtime.Loader.AssemblyLoadContext.Resolving | [NullableAttribute(...)] | 0 | [2,1,1,2] | | System.Runtime.Loader.AssemblyLoadContext.ResolvingUnmanagedDll | [NullableAttribute(...)] | 0 | [2,1,1] | | System.Runtime.Loader.AssemblyLoadContext.ResourceResolve | [NullableAttribute(...)] | 0 | 2 | @@ -3048,6 +9030,26 @@ attrArgPositional | System.Runtime.Loader.AssemblyLoadContext._unloading | [NullableAttribute(...)] | 0 | [2,1] | | System.Runtime.Remoting.ObjectHandle | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.Remoting.ObjectHandle | [NullableContextAttribute(...)] | 0 | 2 | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstance(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstance(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstance(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstance(System.String,System.String,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceFrom(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceFrom(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceFrom(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceFrom(System.String,System.String,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceInternal(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[],System.Threading.StackCrawlMark) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceInternal(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[],System.Threading.StackCrawlMark) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceInternal(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[],System.Threading.StackCrawlMark) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2072:UnrecognizedReflectionPattern | +| System.Runtime.Remoting.ObjectHandle System.Activator.CreateInstanceInternal(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[],System.Threading.StackCrawlMark) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2096:UnrecognizedReflectionPattern | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstance(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstance(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstance(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstance(System.String,System.String,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstanceFrom(System.String,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstanceFrom(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstanceFrom(System.String,System.String,System.Boolean,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | +| System.Runtime.Remoting.ObjectHandle System.AppDomain.CreateInstanceFrom(System.String,System.String,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Type and its constructor could be removed | | System.Runtime.Serialization.IDeserializationCallback | [NullableContextAttribute(...)] | 0 | 2 | | System.Runtime.Serialization.IFormatterConverter | [CLSCompliantAttribute(...)] | 0 | False | | System.Runtime.Serialization.IFormatterConverter | [NullableContextAttribute(...)] | 0 | 1 | @@ -3074,6 +9076,7 @@ attrArgPositional | System.Runtime.TargetedPatchingOptOutAttribute | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.TargetedPatchingOptOutAttribute | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.Versioning.ComponentGuaranteesAttribute | [AttributeUsageAttribute(...)] | 0 | 5887 | +| System.Runtime.Versioning.FrameworkName | [NotNullWhenAttribute(...)] | 0 | True | | System.Runtime.Versioning.FrameworkName | [NullableAttribute(...)] | 0 | 0 | | System.Runtime.Versioning.FrameworkName | [NullableContextAttribute(...)] | 0 | 1 | | System.Runtime.Versioning.NonVersionableAttribute | [AttributeUsageAttribute(...)] | 0 | 108 | @@ -3094,9 +9097,95 @@ attrArgPositional | System.Runtime.Versioning.TargetPlatformAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | | System.Runtime.Versioning.UnsupportedOSPlatformAttribute | [AttributeUsageAttribute(...)] | 0 | 2047 | | System.Runtime.Versioning.UnsupportedOSPlatformGuardAttribute | [AttributeUsageAttribute(...)] | 0 | 448 | +| System.RuntimeFieldHandle System.ModuleHandle.GetRuntimeFieldHandleFromMetadataToken(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeFieldHandle System.ModuleHandle.ResolveFieldHandle(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeFieldHandle System.ModuleHandle.ResolveFieldHandle(System.Int32,System.RuntimeTypeHandle[],System.RuntimeTypeHandle[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeMethodHandle System.ModuleHandle.GetRuntimeMethodHandleFromMetadataToken(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeMethodHandle System.ModuleHandle.ResolveMethodHandle(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeMethodHandle System.ModuleHandle.ResolveMethodHandle(System.Int32,System.RuntimeTypeHandle[],System.RuntimeTypeHandle[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeType | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1 | +| System.RuntimeType | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.RuntimeType | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | | System.RuntimeType.ListBuilder`1 | [DefaultMemberAttribute(...)] | 0 | Item | | System.RuntimeTypeHandle | [NullableAttribute(...)] | 0 | 0 | | System.RuntimeTypeHandle | [NullableContextAttribute(...)] | 0 | 2 | +| System.RuntimeTypeHandle System.ModuleHandle.GetRuntimeTypeHandleFromMetadataToken(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeTypeHandle System.ModuleHandle.ResolveTypeHandle(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeTypeHandle System.ModuleHandle.ResolveTypeHandle(System.Int32,System.RuntimeTypeHandle[],System.RuntimeTypeHandle[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.RuntimeType[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateInterfaces(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.RuntimeType[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateInterfaces(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2065:UnrecognizedReflectionPattern | +| System.RuntimeType[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateNestedClasses(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.RuntimeType[] System.RuntimeType.RuntimeTypeCache.MemberInfoCache`1.PopulateNestedClasses(System.RuntimeType.RuntimeTypeCache.Filter) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.SByte System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Byte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.DateTime) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Double) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Int16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Object,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.Single) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.String,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.SByte System.Convert.ToSByte(System.String,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Convert.ToSByte(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Decimal.ToSByte(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Decimal.op_Explicit(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.IO.BinaryReader.ReadSByte() | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.IO.UnmanagedMemoryAccessor.ReadSByte(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Math.Abs(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Math.Clamp(System.SByte,System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Math.Max(System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Math.Min(System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Runtime.Serialization.SerializationInfo.GetSByte(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.SByte.Abs(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Clamp(System.SByte,System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.LeadingZeroCount(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Log2(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Max(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Min(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.SByte System.SByte.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.SByte System.SByte.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.SByte System.SByte.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.SByte System.SByte.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.PopCount(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.RotateLeft(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.RotateRight(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.Sign(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.TrailingZeroCount(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_Addition(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_BitwiseAnd(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_BitwiseOr(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_Decrement(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_Division(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_ExclusiveOr(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_Increment(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_LeftShift(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_Modulus(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_Multiply(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_OnesComplement(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_RightShift(System.SByte,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_Subtraction(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_UnaryNegation(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.SByte.op_UnaryPlus(System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.SByte System.Threading.Thread.VolatileRead(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.SByte System.Threading.Volatile.Read(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | | System.STAThreadAttribute | [AttributeUsageAttribute(...)] | 0 | 64 | | System.Security.AllowPartiallyTrustedCallersAttribute | [AttributeUsageAttribute(...)] | 0 | 1 | | System.Security.Cryptography.CryptographicException | [NullableAttribute(...)] | 0 | 0 | @@ -3104,12 +9193,16 @@ attrArgPositional | System.Security.Cryptography.CryptographicException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Security.IPermission | [NullableContextAttribute(...)] | 0 | 2 | | System.Security.IPermission | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | +| System.Security.IPermission System.Security.IPermission.Copy() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Security.IPermission System.Security.Permissions.SecurityAttribute.CreatePermission() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Security.IPermission System.Security.Permissions.SecurityPermissionAttribute.CreatePermission() | [NullableContextAttribute(...)] | 0 | 2 | | System.Security.ISecurityEncodable | [NullableContextAttribute(...)] | 0 | 1 | | System.Security.IStackWalk | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | | System.Security.PermissionSet | [NullableAttribute(...)] | 0 | 0 | | System.Security.PermissionSet | [NullableContextAttribute(...)] | 0 | 2 | | System.Security.PermissionSet | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | | System.Security.PermissionSet System.AppDomain.PermissionSet | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | +| System.Security.PermissionSet System.Security.PermissionSet.Copy() | [NullableContextAttribute(...)] | 0 | 1 | | System.Security.Permissions.CodeAccessSecurityAttribute | [AttributeUsageAttribute(...)] | 0 | 109 | | System.Security.Permissions.CodeAccessSecurityAttribute | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | | System.Security.Permissions.PermissionState | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | @@ -3122,11 +9215,18 @@ attrArgPositional | System.Security.Principal.IIdentity | [NullableContextAttribute(...)] | 0 | 2 | | System.Security.Principal.IPrincipal | [NullableContextAttribute(...)] | 0 | 2 | | System.Security.Principal.IPrincipal System.Threading.Thread.CurrentPrincipal | [NullableAttribute(...)] | 0 | 2 | +| System.Security.Principal.IPrincipal System.Threading.Thread.get_CurrentPrincipal() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Security.SecureString System.Security.SecureString.Copy() | [NullableContextAttribute(...)] | 0 | 1 | | System.Security.SecurityCriticalAttribute | [AttributeUsageAttribute(...)] | 0 | 5501 | | System.Security.SecurityCriticalScope | [ObsoleteAttribute(...)] | 0 | SecurityCriticalScope is only used for .NET 2.0 transparency compatibility. | | System.Security.SecurityCriticalScope System.Security.SecurityCriticalAttribute.Scope | [ObsoleteAttribute(...)] | 0 | SecurityCriticalScope is only used for .NET 2.0 transparency compatibility. | +| System.Security.SecurityElement | [NotNullWhenAttribute(...)] | 0 | True | | System.Security.SecurityElement | [NullableAttribute(...)] | 0 | 0 | | System.Security.SecurityElement | [NullableContextAttribute(...)] | 0 | 2 | +| System.Security.SecurityElement System.Security.ISecurityEncodable.ToXml() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Security.SecurityElement System.Security.SecurityElement.Copy() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Security.SecurityElement System.Security.SecurityElement.FromString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Security.SecurityElement System.Security.SecurityElement.SearchForChildByTag(System.String) | [NullableContextAttribute(...)] | 0 | 1 | | System.Security.SecurityException | [NullableAttribute(...)] | 0 | 0 | | System.Security.SecurityException | [NullableContextAttribute(...)] | 0 | 2 | | System.Security.SecurityException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -3141,8 +9241,97 @@ attrArgPositional | System.Security.VerificationException | [NullableContextAttribute(...)] | 0 | 2 | | System.Security.VerificationException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.SerializableAttribute | [AttributeUsageAttribute(...)] | 0 | 4124 | +| System.Single System.BitConverter.ToSingle(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Single System.BitConverter.UInt32BitsToSingle(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Single System.Convert.ToSingle(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Single System.Convert.ToSingle(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Single System.Convert.ToSingle(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Single System.Convert.ToSingle(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Single System.Single.Abs(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Acos(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Acosh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Asin(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Asinh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Atan2(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Atan(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Atanh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.BitDecrement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.BitIncrement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Cbrt(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Ceiling(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Clamp(System.Single,System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.CopySign(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Cos(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Cosh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Exp(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Floor(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.FusedMultiplyAdd(System.Single,System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.IEEERemainder(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Log2(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Log10(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Log(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Log(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Max(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.MaxMagnitude(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Min(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.MinMagnitude(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Single System.Single.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Single System.Single.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Single System.Single.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Single System.Single.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Pow(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Round(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Round(System.Single,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Round`1(System.Single,!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Round`1(System.Single,!0,System.MidpointRounding) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.ScaleB`1(System.Single,!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Sign(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Sin(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Sinh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Sqrt(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Tan(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Tanh(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.Truncate(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_Addition(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_BitwiseAnd(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_BitwiseOr(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_Decrement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_Division(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_ExclusiveOr(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_Increment(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_Modulus(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_Multiply(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_OnesComplement(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_Subtraction(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_UnaryNegation(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Single System.Single.op_UnaryPlus(System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.Span | [NullableAttribute(...)] | 0 | [0,1] | +| System.Span System.MemoryExtensions.AsSpan`1(!0[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Index) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(!0[],System.Range) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Index) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.AsSpan`1(System.ArraySegment,System.Range) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.MemoryExtensions.TrimEnd`1(System.Span,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Span System.MemoryExtensions.TrimStart`1(System.Span,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Span System.MemoryExtensions.Trim`1(System.Span,!0) | [NullableContextAttribute(...)] | 0 | 1 | | System.Span System.Memory`1.Span | [NullableAttribute(...)] | 0 | [0,1] | +| System.Span System.Runtime.InteropServices.CollectionsMarshal.AsSpan`1(System.Collections.Generic.List) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Span System.Runtime.InteropServices.MemoryMarshal.CreateSpan`1(!0,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | | System.Span System.Span`1.Empty | [NullableAttribute(...)] | 0 | [0,1] | +| System.Span.Enumerator System.Span`1.GetEnumerator() | [NullableContextAttribute(...)] | 0 | 0 | +| System.Span | [NullableAttribute(...)] | 0 | [0,1] | | System.Span System.Text.StringBuilder.RemainingCurrentChunk | [NullableAttribute(...)] | 0 | 0 | | System.Span`1 | [DebuggerDisplayAttribute(...)] | 0 | {ToString(),raw} | | System.Span`1 | [DebuggerTypeProxyAttribute(...)] | 0 | System.SpanDebugView`1 | @@ -3157,18 +9346,350 @@ attrArgPositional | System.StackOverflowException | [NullableAttribute(...)] | 0 | 0 | | System.StackOverflowException | [NullableContextAttribute(...)] | 0 | 2 | | System.StackOverflowException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.String System.AppContext.GetBaseDirectoryCore() | [UnconditionalSuppressMessageAttribute(...)] | 0 | SingleFile | +| System.String System.AppContext.GetBaseDirectoryCore() | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL3000: Avoid accessing Assembly file path when publishing as a single file | +| System.String System.AppContext.get_BaseDirectory() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.AppDomain.get_DynamicDirectory() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.AppDomain.get_RelativeSearchPath() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.ApplicationId.get_Culture() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.ApplicationId.get_ProcessorArchitecture() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.ArgumentException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.ArgumentOutOfRangeException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.BadImageFormatException.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.BadImageFormatException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Boolean.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Boolean.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Buffers.StandardFormat.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Byte.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Byte.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Byte.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Byte.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Char.ConvertFromUtf32(System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Char.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Char.ToString(System.Char) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Char.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Console.ReadLine() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Console.ReadLine() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.String System.Console.ReadLine() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.String System.Console.get_Title() | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.String System.Convert.ToBase64String(System.Byte[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToBase64String(System.Byte[],System.Base64FormattingOptions) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToBase64String(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToBase64String(System.Byte[],System.Int32,System.Int32,System.Base64FormattingOptions) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToBase64String(System.ReadOnlySpan,System.Base64FormattingOptions) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.Convert.ToHexString(System.Byte[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToHexString(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToHexString(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.Convert.ToString(System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Boolean,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Byte) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Byte,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Byte,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Char) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Char,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.DateTime) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.DateTime,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Decimal) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Decimal,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Double) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Double,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int16) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int16,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int16,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int32,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int64) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int64,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Int64,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.SByte) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.SByte,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.SByte,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Single) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.Single,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.UInt16) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.UInt16,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.UInt16,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.UInt32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.UInt32,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.UInt32,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.UInt64) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Convert.ToString(System.UInt64,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Convert.ToString(System.UInt64,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateOnly.ToLongDateString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateOnly.ToShortDateString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateOnly.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateOnly.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateOnly.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateOnly.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.DateTime.ToLongDateString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTime.ToLongTimeString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTime.ToShortDateString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTime.ToShortTimeString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTime.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTime.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTime.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTime.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.DateTimeOffset.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTimeOffset.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTimeOffset.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.DateTimeOffset.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Decimal.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Decimal.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Decimal.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Decimal.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Diagnostics.CodeAnalysis.RequiresUnreferencedCodeAttribute.get_Url() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_Category() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.CodeAnalysis.SuppressMessageAttribute.get_CheckId() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_Category() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute.get_CheckId() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.Contracts.ContractException.get_Failure() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.Contracts.ContractOptionAttribute.get_Value() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Diagnostics.DebuggerDisplayAttribute.get_Value() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.DebuggerTypeProxyAttribute.get_ProxyTypeName() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.DebuggerVisualizerAttribute.get_VisualizerTypeName() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.StackFrame.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.Tracing.EventSource.GenerateManifest(System.Type,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.String System.Diagnostics.Tracing.EventSource.GenerateManifest(System.Type,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2114:ReflectionToDynamicallyAccessedMembers | +| System.String System.Diagnostics.Tracing.EventSource.GenerateManifest(System.Type,System.String,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.String System.Diagnostics.Tracing.EventSource.GenerateManifest(System.Type,System.String,System.Diagnostics.Tracing.EventManifestOptions) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2114:ReflectionToDynamicallyAccessedMembers | +| System.String System.Diagnostics.Tracing.EventSource.GetName(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.Tracing.EventSource.GetTrait(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.Tracing.EventSource.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Diagnostics.Tracing.EventSource.get_Name() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Double.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Double.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Double.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Double.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Enum.GetName`1(!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.Enum.ToString(System.IFormatProvider) | [ObsoleteAttribute(...)] | 0 | The provider argument is not used. Use ToString() instead. | +| System.String System.Enum.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Enum.ToString(System.String,System.IFormatProvider) | [ObsoleteAttribute(...)] | 0 | The provider argument is not used. Use ToString(String) instead. | +| System.String System.Environment.get_ProcessPath() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Exception.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Exception.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Globalization.CultureNotFoundException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Guid.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Guid.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Guid.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Half.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Half.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Half.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Half.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IConvertible.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.Enumeration.FileSystemEntry.ToFullPath() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.Enumeration.FileSystemEntry.ToSpecifiedFullPath() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.Enumeration.FileSystemName.TranslateWin32Expression(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.FileInfo.get_DirectoryName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.FileLoadException.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.FileLoadException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.FileNotFoundException.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.FileNotFoundException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IO.FileSystemInfo.get_LinkTarget() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.ChangeExtension(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.GetDirectoryName(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.GetExtension(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.GetFileName(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.GetFileNameWithoutExtension(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.GetPathRoot(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.Join(System.ReadOnlySpan,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.IO.Path.Join(System.ReadOnlySpan,System.ReadOnlySpan,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.IO.Path.Join(System.ReadOnlySpan,System.ReadOnlySpan,System.ReadOnlySpan,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.IO.Path.Join(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.Join(System.String,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.Path.Join(System.String,System.String,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.StreamReader.ReadLine() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.StringReader.ReadLine() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IO.TextReader.ReadLine() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Index.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int16.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int16.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int16.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int16.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Int32.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int32.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int32.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int32.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Int64.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int64.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int64.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Int64.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.IntPtr.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IntPtr.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IntPtr.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.IntPtr.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Lazy`1.ToString() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.MissingMemberException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Nullable`1.ToString() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Numerics.Matrix3x2.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Matrix4x4.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Plane.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Quaternion.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector2.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector2.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector2.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Numerics.Vector3.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector3.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector3.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Numerics.Vector4.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector4.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector4.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Numerics.Vector`1.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector`1.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Numerics.Vector`1.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Range.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Reflection.Assembly.CreateQualifiedName(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Assembly.get_CodeBase() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Assembly.get_FullName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.AssemblyMetadataAttribute.get_Value() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.AssemblyName.EscapeCodeBase(System.String) | [RequiresAssemblyFilesAttribute(...)] | 0 | The code will return an empty string for assemblies embedded in a single-file app | +| System.String System.Reflection.AssemblyName.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Reflection.AssemblyName.get_CodeBase() | [RequiresAssemblyFilesAttribute(...)] | 0 | The code will return an empty string for assemblies embedded in a single-file app | +| System.String System.Reflection.AssemblyName.get_FullName() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Reflection.Emit.AssemblyBuilder.get_CodeBase() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.AssemblyBuilder.get_FullName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.EnumBuilder.get_AssemblyQualifiedName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.EnumBuilder.get_FullName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.EnumBuilder.get_Namespace() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.GenericTypeParameterBuilder.get_AssemblyQualifiedName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.GenericTypeParameterBuilder.get_FullName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.GenericTypeParameterBuilder.get_Namespace() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.ModuleBuilder.ResolveString(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.String System.Reflection.Emit.TypeBuilder.get_AssemblyQualifiedName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.TypeBuilder.get_FullName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.Emit.TypeBuilder.get_Namespace() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.ExceptionHandlingClause.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Reflection.Module.ResolveString(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.String System.Reflection.ParameterInfo.get_Name() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.RuntimeModule.GetFullyQualifiedName() | [RequiresAssemblyFilesAttribute(...)] | 0 | Returns for modules with no file path | +| System.String System.Reflection.RuntimeModule.ResolveString(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.String System.Reflection.TypeDelegator.get_AssemblyQualifiedName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.TypeDelegator.get_FullName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Reflection.TypeDelegator.get_Namespace() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Resources.ResourceManager.GetString(System.String,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.CompilerServices.AsyncMethodBuilderCore.GetAsyncStateMachineDescription(System.Runtime.CompilerServices.IAsyncStateMachine) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.String System.Runtime.CompilerServices.AsyncMethodBuilderCore.GetAsyncStateMachineDescription(System.Runtime.CompilerServices.IAsyncStateMachine) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.String System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.ToStringAndClear() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.CompilerServices.SwitchExpressionException.get_Message() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.CLong.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.COMException.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.CULong.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.ExternalException.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.Marshal.GetTypeInfoName(System.Runtime.InteropServices.ComTypes.ITypeInfo) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.String System.Runtime.InteropServices.Marshal.PtrToStringAnsi(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.InteropServices.Marshal.PtrToStringAuto(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.InteropServices.Marshal.PtrToStringAuto(System.IntPtr,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.InteropServices.Marshal.PtrToStringUTF8(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.InteropServices.Marshal.PtrToStringUni(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.InteropServices.NFloat.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.NFloat.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.NFloat.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.InteropServices.NFloat.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.Intrinsics.Vector64`1.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.Intrinsics.Vector128`1.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.Intrinsics.Vector256`1.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.Loader.AssemblyLoadContext.get_Name() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.Versioning.TargetFrameworkAttribute.get_FrameworkDisplayName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Runtime.Versioning.VersioningHelper.MakeVersionSafeName(System.String,System.Runtime.Versioning.ResourceScope,System.Runtime.Versioning.ResourceScope) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Runtime.Versioning.VersioningHelper.MakeVersionSafeName(System.String,System.Runtime.Versioning.ResourceScope,System.Runtime.Versioning.ResourceScope,System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.SByte.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.SByte.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.SByte.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.SByte.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Security.PermissionSet.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Security.SecurityElement.Attribute(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Security.SecurityElement.SearchForTextOfTag(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Security.SecurityElement.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Security.SecurityElement.get_Tag() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Security.SecurityException.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Single.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Single.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Single.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Single.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Concat(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Concat(System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Concat(System.ReadOnlySpan,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.String.Concat(System.ReadOnlySpan,System.ReadOnlySpan,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.String.Concat(System.ReadOnlySpan,System.ReadOnlySpan,System.ReadOnlySpan,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.String.Concat(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Concat(System.String,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Concat(System.String,System.String,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Create(System.IFormatProvider,System.Span,System.Runtime.CompilerServices.DefaultInterpolatedStringHandler) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.String.Format(System.IFormatProvider,System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Format(System.IFormatProvider,System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.String.Format(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Text.ASCIIEncoding.GetString(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Text.Encoding.GetString(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.String System.Text.Encoding.GetString(System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.Text.Encoding.GetString(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.String System.Text.Rune.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Text.UTF8Encoding.GetString(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Threading.Tasks.ValueTask`1.ToString() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Threading.Thread.get_Name() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Threading.ThreadLocal`1.ToString() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.TimeOnly.ToLongTimeString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.TimeOnly.ToShortTimeString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.TimeOnly.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.TimeOnly.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.TimeOnly.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.TimeOnly.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.TimeSpan.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.TimeSpan.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.TimeSpan.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Tuple`1.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Tuple`2.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Type.get_AssemblyQualifiedName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Type.get_FullName() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.Type.get_Namespace() | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.UInt16.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt16.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt16.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt16.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.UInt32.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt32.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt32.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt32.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.UInt64.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt64.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt64.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UInt64.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.UIntPtr.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UIntPtr.ToString(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UIntPtr.ToString(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.UIntPtr.ToString(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.String System.ValueTuple`1.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.ValueTuple`2.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.ValueTuple`3.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.ValueTuple`4.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Version.ToString() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String System.Version.ToString(System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | | System.StringComparer | [NullableAttribute(...)] | 0 | 0 | | System.StringComparer | [NullableContextAttribute(...)] | 0 | 1 | | System.StringComparer | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.StringComparer System.Globalization.GlobalizationExtensions.GetStringComparer(System.Globalization.CompareInfo,System.Globalization.CompareOptions) | [NullableContextAttribute(...)] | 0 | 1 | | System.StringNormalizationExtensions | [NullableAttribute(...)] | 0 | 0 | | System.StringNormalizationExtensions | [NullableContextAttribute(...)] | 0 | 1 | +| System.String[] System.DateTime.GetDateTimeFormats() | [NullableContextAttribute(...)] | 0 | 1 | +| System.String[] System.DateTime.GetDateTimeFormats(System.Char) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String[] System.DateTime.GetDateTimeFormats(System.Char,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.String[] System.DateTime.GetDateTimeFormats(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | | System.SystemException | [NullableAttribute(...)] | 0 | 0 | | System.SystemException | [NullableContextAttribute(...)] | 0 | 2 | | System.SystemException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Text.Decoder System.Text.ASCIIEncoding.GetDecoder() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.Decoder System.Text.UTF8Encoding.GetDecoder() | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.DecoderFallback | [NullableAttribute(...)] | 0 | 0 | | System.Text.DecoderFallback | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.DecoderFallback System.Text.Decoder.Fallback | [NullableAttribute(...)] | 0 | 2 | +| System.Text.DecoderFallback System.Text.Decoder.get_Fallback() | [NullableContextAttribute(...)] | 0 | 2 | | System.Text.DecoderFallbackBuffer System.Text.Decoder.FallbackBuffer | [NullableAttribute(...)] | 0 | 1 | +| System.Text.DecoderFallbackBuffer System.Text.Decoder.get_FallbackBuffer() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.DecoderFallbackBuffer System.Text.DecoderExceptionFallback.CreateFallbackBuffer() | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.DecoderFallbackException | [NullableAttribute(...)] | 0 | 0 | | System.Text.DecoderFallbackException | [NullableContextAttribute(...)] | 0 | 2 | | System.Text.DecoderFallbackException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -3176,22 +9697,30 @@ attrArgPositional | System.Text.DecoderReplacementFallback | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.DecoderReplacementFallbackBuffer | [NullableAttribute(...)] | 0 | 0 | | System.Text.DecoderReplacementFallbackBuffer | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.Encoder System.Text.ASCIIEncoding.GetEncoder() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.Encoder System.Text.UTF8Encoding.GetEncoder() | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.EncoderFallback | [NullableAttribute(...)] | 0 | 0 | | System.Text.EncoderFallback | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.EncoderFallback System.Text.Encoder.Fallback | [NullableAttribute(...)] | 0 | 2 | +| System.Text.EncoderFallback System.Text.Encoder.get_Fallback() | [NullableContextAttribute(...)] | 0 | 2 | | System.Text.EncoderFallbackBuffer System.Text.Encoder.FallbackBuffer | [NullableAttribute(...)] | 0 | 1 | +| System.Text.EncoderFallbackBuffer System.Text.Encoder.get_FallbackBuffer() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.EncoderFallbackBuffer System.Text.EncoderExceptionFallback.CreateFallbackBuffer() | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.EncoderFallbackException | [NullableAttribute(...)] | 0 | 0 | | System.Text.EncoderFallbackException | [NullableContextAttribute(...)] | 0 | 2 | | System.Text.EncoderFallbackException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Text.EncoderReplacementFallback | [NullableAttribute(...)] | 0 | 0 | | System.Text.EncoderReplacementFallback | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.Encoding | [NullableAttribute(...)] | 0 | 0 | +| System.Text.Encoding | [NullableAttribute(...)] | 0 | 1 | +| System.Text.Encoding | [NullableAttribute(...)] | 0 | 2 | | System.Text.Encoding | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.Encoding System.Console.InputEncoding | [UnsupportedOSPlatformAttribute(...)] | 0 | android | | System.Text.Encoding System.Console.InputEncoding | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.Text.Encoding System.Console.InputEncoding | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | | System.Text.Encoding System.Console.InputEncoding | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | | System.Text.Encoding System.Text.Encoding.UTF7 | [ObsoleteAttribute(...)] | 0 | The UTF-7 encoding is insecure and should not be used. Consider using UTF-8 instead. | +| System.Text.Encoding System.Text.EncodingProvider.GetEncoding(System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | | System.Text.EncodingInfo | [NullableAttribute(...)] | 0 | 0 | | System.Text.EncodingInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.EncodingProvider | [NullableAttribute(...)] | 0 | 0 | @@ -3202,17 +9731,42 @@ attrArgPositional | System.Text.NormalizationForm.FormKC | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.Text.NormalizationForm.FormKD | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.Text.Rune | [DebuggerDisplayAttribute(...)] | 0 | {DebuggerDisplay,nq} | +| System.Text.Rune System.Text.Rune.GetRuneAt(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.Rune System.Text.Rune.ToLower(System.Text.Rune,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.Rune System.Text.Rune.ToUpper(System.Text.Rune,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Text.Rune System.Text.Rune.op_Explicit(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | | System.Text.SpanLineEnumerator | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.Text.SpanLineEnumerator | [ObsoleteAttribute(...)] | 1 | True | | System.Text.SpanRuneEnumerator | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.Text.SpanRuneEnumerator | [ObsoleteAttribute(...)] | 1 | True | | System.Text.StringBuilder | [DefaultMemberAttribute(...)] | 0 | Chars | +| System.Text.StringBuilder | [NotNullWhenAttribute(...)] | 0 | True | | System.Text.StringBuilder | [NullableAttribute(...)] | 0 | 0 | +| System.Text.StringBuilder | [NullableAttribute(...)] | 0 | 2 | | System.Text.StringBuilder | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.StringBuilder | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.Char*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.ReadOnlyMemory) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.Append(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.AppendFormat(System.IFormatProvider,System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Text.StringBuilder System.Text.StringBuilder.AppendFormat(System.IFormatProvider,System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Text.StringBuilder System.Text.StringBuilder.AppendFormat(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Text.StringBuilder System.Text.StringBuilder.Insert(System.Int32,System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Text.StringBuilder System.Text.StringBuilder.Insert(System.Int32,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.Insert(System.Int32,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.Insert(System.Int32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Text.StringBuilder System.Text.StringBuilder.Insert(System.Int32,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | | System.Text.StringBuilder.AppendInterpolatedStringHandler | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Text.StringBuilder.AppendInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | | +| System.Text.StringBuilder.AppendInterpolatedStringHandler | [InterpolatedStringHandlerArgumentAttribute(...)] | 0 | [,provider] | | System.Text.StringBuilder.AppendInterpolatedStringHandler | [NullableAttribute(...)] | 0 | 0 | | System.Text.StringBuilder.ChunkEnumerator | [NullableContextAttribute(...)] | 0 | 0 | +| System.Text.StringBuilder.ChunkEnumerator System.Text.StringBuilder.ChunkEnumerator.GetEnumerator() | [EditorBrowsableAttribute(...)] | 0 | 1 | | System.Text.UTF7Encoding | [NullableAttribute(...)] | 0 | 0 | | System.Text.UTF7Encoding | [NullableContextAttribute(...)] | 0 | 1 | | System.Text.UTF32Encoding | [NullableAttribute(...)] | 0 | 0 | @@ -3238,17 +9792,25 @@ attrArgPositional | System.Threading.CancellationToken | [DebuggerDisplayAttribute(...)] | 0 | IsCancellationRequested = {IsCancellationRequested} | | System.Threading.CancellationToken | [NullableAttribute(...)] | 0 | 0 | | System.Threading.CancellationToken | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.CancellationTokenRegistration System.Threading.CancellationToken.Register(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.CancellationTokenRegistration System.Threading.CancellationToken.Register(System.Action,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.CancellationTokenSource | [NullableAttribute(...)] | 0 | 0 | | System.Threading.CancellationTokenSource | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.CompressedStack | [NullableAttribute(...)] | 0 | 0 | | System.Threading.CompressedStack | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.CompressedStack System.Threading.Thread.GetCompressedStack() | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | | System.Threading.EventWaitHandle | [NullableAttribute(...)] | 0 | 0 | | System.Threading.EventWaitHandle | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.EventWaitHandle System.Threading.EventWaitHandle.OpenExisting(System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | | System.Threading.ExecutionContext | [NullableAttribute(...)] | 0 | 0 | | System.Threading.ExecutionContext | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.ExecutionContext System.Threading.ExecutionContext.Capture() | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.ExecutionContext System.Threading.Tasks.Task.CapturedContext | [NullableAttribute(...)] | 0 | 2 | | System.Threading.ExecutionContext System.Threading.Thread.ExecutionContext | [NullableAttribute(...)] | 0 | 2 | +| System.Threading.ExecutionContext System.Threading.Thread.get_ExecutionContext() | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.IOCompletionCallback | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.IOCompletionCallback | [NullableAttribute(...)] | 0 | 1 | +| System.Threading.IOCompletionCallback | [NullableAttribute(...)] | 0 | 2 | | System.Threading.Interlocked | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Interlocked | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.LazyInitializer | [NullableAttribute(...)] | 0 | 0 | @@ -3261,20 +9823,50 @@ attrArgPositional | System.Threading.Monitor | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.Mutex | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Mutex | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.Pack(System.Threading.IOCompletionCallback) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.Pack(System.Threading.IOCompletionCallback) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.Pack(System.Threading.IOCompletionCallback) | [ObsoleteAttribute(...)] | 0 | This overload is not safe and has been deprecated. Use Pack(IOCompletionCallback?, object?) instead. | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.Pack(System.Threading.IOCompletionCallback,System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.UnsafePack(System.Threading.IOCompletionCallback) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.UnsafePack(System.Threading.IOCompletionCallback) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.UnsafePack(System.Threading.IOCompletionCallback) | [ObsoleteAttribute(...)] | 0 | This overload is not safe and has been deprecated. Use UnsafePack(IOCompletionCallback?, object?) instead. | +| System.Threading.NativeOverlapped* System.Threading.Overlapped.UnsafePack(System.Threading.IOCompletionCallback,System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.NativeOverlapped* System.Threading.ThreadPoolBoundHandle.AllocateNativeOverlapped(System.Threading.IOCompletionCallback,System.Object,System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.NativeOverlapped* System.Threading.ThreadPoolBoundHandle.AllocateNativeOverlapped(System.Threading.IOCompletionCallback,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.NativeOverlapped* System.Threading.ThreadPoolBoundHandle.AllocateNativeOverlapped(System.Threading.PreAllocatedOverlapped) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.NativeOverlapped* System.Threading.ThreadPoolBoundHandle.UnsafeAllocateNativeOverlapped(System.Threading.IOCompletionCallback,System.Object,System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.NativeOverlapped* System.Threading.ThreadPoolBoundHandle.UnsafeAllocateNativeOverlapped(System.Threading.IOCompletionCallback,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.Overlapped | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Overlapped | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Overlapped System.Threading.Overlapped.Unpack(System.Threading.NativeOverlapped*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.Overlapped System.Threading.Overlapped.Unpack(System.Threading.NativeOverlapped*) | [NullableContextAttribute(...)] | 0 | 0 | | System.Threading.PortableThreadPool.WaitThread System.Threading.RegisteredWaitHandle.WaitThread | [NullableAttribute(...)] | 0 | 2 | +| System.Threading.PreAllocatedOverlapped | [NullableAttribute(...)] | 0 | 1 | +| System.Threading.PreAllocatedOverlapped System.Threading.PreAllocatedOverlapped.UnsafeCreate(System.Threading.IOCompletionCallback,System.Object,System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.PreAllocatedOverlapped System.Threading.PreAllocatedOverlapped.UnsafeCreate(System.Threading.IOCompletionCallback,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.RegisteredWaitHandle | [NullableAttribute(...)] | 0 | 0 | | System.Threading.RegisteredWaitHandle | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.RegisteredWaitHandle | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.RegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.Int32,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.RegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.Int64,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.RegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.TimeSpan,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.RegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.UInt32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.RegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.UInt32,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.UnsafeRegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.Int32,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.UnsafeRegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.Int64,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.UnsafeRegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.TimeSpan,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.UnsafeRegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.UInt32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Threading.RegisteredWaitHandle System.Threading.ThreadPool.UnsafeRegisterWaitForSingleObject(System.Threading.WaitHandle,System.Threading.WaitOrTimerCallback,System.Object,System.UInt32,System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | | System.Threading.Semaphore | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Semaphore | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.Semaphore System.Threading.Semaphore.OpenExisting(System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | | System.Threading.SemaphoreFullException | [NullableAttribute(...)] | 0 | 0 | | System.Threading.SemaphoreFullException | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.SemaphoreFullException | [TypeForwardedFromAttribute(...)] | 0 | System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Threading.SemaphoreSlim | [DebuggerDisplayAttribute(...)] | 0 | Current Count = {m_currentCount} | | System.Threading.SemaphoreSlim | [NullableAttribute(...)] | 0 | 0 | | System.Threading.SemaphoreSlim | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.SemaphoreSlim System.IO.Stream.EnsureAsyncActiveSemaphoreInitialized() | [MemberNotNullAttribute(...)] | 0 | _asyncActiveSemaphore | | System.Threading.SpinLock | [DebuggerDisplayAttribute(...)] | 0 | IsHeld = {IsHeld} | | System.Threading.SpinLock | [DebuggerTypeProxyAttribute(...)] | 0 | System.Threading.SpinLock.SystemThreading_SpinLockDebugView | | System.Threading.SpinWait | [NullableAttribute(...)] | 0 | 0 | @@ -3282,6 +9874,7 @@ attrArgPositional | System.Threading.SynchronizationContext | [NullableAttribute(...)] | 0 | 0 | | System.Threading.SynchronizationContext | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.SynchronizationContext System.Threading.SynchronizationContext.Current | [NullableAttribute(...)] | 0 | 2 | +| System.Threading.SynchronizationContext System.Threading.SynchronizationContext.get_Current() | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.SynchronizationContext.<>c.<>9__8_0 | [TupleElementNamesAttribute(...)] | 0 | [d,state] | | System.Threading.SynchronizationLockException | [NullableAttribute(...)] | 0 | 0 | | System.Threading.SynchronizationLockException | [NullableContextAttribute(...)] | 0 | 2 | @@ -3303,8 +9896,63 @@ attrArgPositional | System.Threading.Tasks.Task | [DebuggerTypeProxyAttribute(...)] | 0 | System.Threading.Tasks.SystemThreadingTasks_TaskDebugView | | System.Threading.Tasks.Task | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Tasks.Task | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.OutputTabsAsync() | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__22 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteAsync(System.Char) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__36 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteAsync(System.Char[],System.Int32,System.Int32) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__37 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__39 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteAsync(System.String) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__38 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteAsync(System.Text.StringBuilder,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__40 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteLineAsync() | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__58 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteLineAsync(System.Char) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__59 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteLineAsync(System.Char[],System.Int32,System.Int32) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__60 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteLineAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__62 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteLineAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteLineAsync(System.String) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__61 | +| System.Threading.Tasks.Task System.CodeDom.Compiler.IndentedTextWriter.WriteLineAsync(System.Text.StringBuilder,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.CodeDom.Compiler.IndentedTextWriter.d__63 | +| System.Threading.Tasks.Task System.IO.BufferedStream.CopyToAsyncCore(System.IO.Stream,System.Int32,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.BufferedStream.d__69 | +| System.Threading.Tasks.Task System.IO.BufferedStream.FlushAsyncInternal(System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.BufferedStream.d__36 | +| System.Threading.Tasks.Task System.IO.File.g__Core\|72_0(System.String,System.Byte[],System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.File.<g__Core\|72_0>d | +| System.Threading.Tasks.Task System.IO.File.InternalWriteAllLinesAsync(System.IO.TextWriter,System.Collections.Generic.IEnumerable,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.File.d__78 | +| System.Threading.Tasks.Task System.IO.File.InternalWriteAllTextAsync(System.IO.StreamWriter,System.String,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.File.d__79 | +| System.Threading.Tasks.Task System.IO.Strategies.BufferedFileStreamStrategy.CopyToAsyncCore(System.IO.Stream,System.Int32,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Strategies.BufferedFileStreamStrategy.d__59 | +| System.Threading.Tasks.Task System.IO.Strategies.BufferedFileStreamStrategy.FlushAsyncInternal(System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Strategies.BufferedFileStreamStrategy.d__57 | +| System.Threading.Tasks.Task System.IO.Stream.g__Core\|29_0(System.IO.Stream,System.IO.Stream,System.Int32,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Stream.<g__Core\|29_0>d | +| System.Threading.Tasks.Task System.IO.Stream.FinishWriteAsync(System.Threading.Tasks.Task,System.Byte[]) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Stream.d__57 | +| System.Threading.Tasks.Task System.IO.StreamWriter.g__Core\|76_0(System.Boolean,System.Boolean,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamWriter.<g__Core\|76_0>d | +| System.Threading.Tasks.Task System.IO.StreamWriter.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.IO.StreamWriter.WriteAsyncInternal(System.Char,System.Boolean) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamWriter.d__65 | +| System.Threading.Tasks.Task System.IO.StreamWriter.WriteAsyncInternal(System.ReadOnlyMemory,System.Boolean,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamWriter.d__69 | +| System.Threading.Tasks.Task System.IO.StreamWriter.WriteLineAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.IO.StringWriter.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.IO.StringWriter.WriteLineAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.IO.TextWriter.g__WriteAsyncCore\|60_0(System.Text.StringBuilder,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.TextWriter.<g__WriteAsyncCore\|60_0>d | +| System.Threading.Tasks.Task System.IO.TextWriter.g__WriteLineAsyncCore\|66_0(System.Text.StringBuilder,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.TextWriter.<g__WriteLineAsyncCore\|66_0>d | +| System.Threading.Tasks.Task System.IO.TextWriter.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.IO.TextWriter.WriteLineAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.Task System.IO.UnmanagedMemoryStream.FlushAsync(System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.Tasks.Task System.IO.UnmanagedMemoryStream.WriteAsync(System.Byte[],System.Int32,System.Int32,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.Tasks.Task System.Threading.CancellationTokenSource.Registrations.<>c.b__12_0(System.Object) | [AsyncStateMachineAttribute(...)] | 0 | System.Threading.CancellationTokenSource.Registrations.<>c.<b__12_0>d | | System.Threading.Tasks.Task System.Threading.Tasks.Task.InternalCurrent | [NullableAttribute(...)] | 0 | 2 | | System.Threading.Tasks.Task System.Threading.Tasks.Task.ParentForDebugger | [NullableAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.Task.ContinueWith`1(System.Func,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.Task.ContinueWith`1(System.Func,System.Object,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.Task.ContinueWith`1(System.Func,System.Object,System.Threading.Tasks.TaskContinuationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.TaskFactory.StartNew`1(System.Func,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.TaskFactory.StartNew`1(System.Func,System.Object,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.TaskFactory.StartNew`1(System.Func,System.Object,System.Threading.Tasks.TaskCreationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.Task`1.ContinueWith`1(System.Func>,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.Task`1.ContinueWith`1(System.Func>,System.Object,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.Tasks.Task`1.ContinueWith`1(System.Func>,System.Object,System.Threading.Tasks.TaskContinuationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.Task System.Threading.SemaphoreSlim.WaitUntilCountOrTimeoutAsync(System.Threading.SemaphoreSlim.TaskNode,System.Int32,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.Threading.SemaphoreSlim.d__31 | +| System.Threading.Tasks.Task System.IO.File.InternalReadAllBytesAsync(System.IO.FileStream,System.Int32,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.File.d__70 | +| System.Threading.Tasks.Task System.IO.File.InternalReadAllBytesUnknownLengthAsync(System.IO.FileStream,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.File.d__71 | +| System.Threading.Tasks.Task System.IO.UnmanagedMemoryStream.ReadAsync(System.Byte[],System.Int32,System.Int32,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.Tasks.Task System.IO.File.InternalReadAllTextAsync(System.String,System.Text.Encoding,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.File.d__66 | +| System.Threading.Tasks.Task System.IO.StreamReader.ReadLineAsyncInternal() | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamReader.d__63 | +| System.Threading.Tasks.Task System.IO.StreamReader.ReadToEndAsyncInternal() | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamReader.d__65 | +| System.Threading.Tasks.Task System.IO.TextReader.ReadToEndAsync() | [AsyncStateMachineAttribute(...)] | 0 | System.IO.TextReader.d__14 | +| System.Threading.Tasks.Task System.IO.File.InternalReadAllLinesAsync(System.String,System.Text.Encoding,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.File.d__75 | | System.Threading.Tasks.TaskAsyncEnumerableExtensions | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Tasks.TaskAsyncEnumerableExtensions | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.Tasks.TaskCanceledException | [NullableAttribute(...)] | 0 | 0 | @@ -3326,7 +9974,9 @@ attrArgPositional | System.Threading.Tasks.TaskScheduler | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.Tasks.TaskScheduler System.Threading.Tasks.Task.ExecutingTaskScheduler | [NullableAttribute(...)] | 0 | 2 | | System.Threading.Tasks.TaskScheduler System.Threading.Tasks.TaskFactory.Scheduler | [NullableAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.TaskScheduler System.Threading.Tasks.TaskFactory.get_Scheduler() | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.Tasks.TaskScheduler System.Threading.Tasks.TaskFactory`1.Scheduler | [NullableAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.TaskScheduler System.Threading.Tasks.TaskFactory`1.get_Scheduler() | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.Tasks.TaskScheduler System.Threading.Tasks.TaskScheduler.InternalCurrent | [NullableAttribute(...)] | 0 | 2 | | System.Threading.Tasks.TaskScheduler.UnobservedTaskException | [NullableAttribute(...)] | 0 | [2,1] | | System.Threading.Tasks.TaskSchedulerException | [NullableAttribute(...)] | 0 | 0 | @@ -3341,8 +9991,44 @@ attrArgPositional | System.Threading.Tasks.ValueTask | [AsyncMethodBuilderAttribute(...)] | 0 | System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder | | System.Threading.Tasks.ValueTask | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Tasks.ValueTask | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.Tasks.ValueTask System.IO.BufferedStream.DisposeAsync() | [AsyncStateMachineAttribute(...)] | 0 | System.IO.BufferedStream.d__33 | +| System.Threading.Tasks.ValueTask System.IO.BufferedStream.FlushWriteAsync(System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.BufferedStream.d__40 | +| System.Threading.Tasks.ValueTask System.IO.BufferedStream.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.BufferedStream.WriteToUnderlyingStreamAsync(System.ReadOnlyMemory,System.Threading.CancellationToken,System.Threading.Tasks.Task) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.BufferedStream.d__60 | +| System.Threading.Tasks.ValueTask System.IO.FileStream.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.MemoryStream.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.RandomAccess.WriteAsync(Microsoft.Win32.SafeHandles.SafeFileHandle,System.Collections.Generic.IReadOnlyList>,System.Int64,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.Tasks.ValueTask System.IO.Strategies.BufferedFileStreamStrategy.DisposeAsync() | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Strategies.BufferedFileStreamStrategy.d__28 | +| System.Threading.Tasks.ValueTask System.IO.Strategies.BufferedFileStreamStrategy.WriteAsyncSlowPath(System.Threading.Tasks.Task,System.ReadOnlyMemory,System.Threading.CancellationToken) | [AsyncMethodBuilderAttribute(...)] | 0 | System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder | +| System.Threading.Tasks.ValueTask System.IO.Strategies.BufferedFileStreamStrategy.WriteAsyncSlowPath(System.Threading.Tasks.Task,System.ReadOnlyMemory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Strategies.BufferedFileStreamStrategy.d__50 | +| System.Threading.Tasks.ValueTask System.IO.Strategies.BufferedFileStreamStrategy.WriteToNonSeekableAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Strategies.BufferedFileStreamStrategy.d__49 | +| System.Threading.Tasks.ValueTask System.IO.Stream.WriteAsync(System.ReadOnlyMemory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.StreamWriter.DisposeAsyncCore() | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamWriter.d__37 | +| System.Threading.Tasks.ValueTask System.Text.TranscodingStream.g__DisposeAsyncCore\|30_0(System.ArraySegment) | [AsyncStateMachineAttribute(...)] | 0 | System.Text.TranscodingStream.<g__DisposeAsyncCore\|30_0>d | +| System.Threading.Tasks.ValueTask System.Text.TranscodingStream.g__WriteAsyncCore\|50_0(System.ReadOnlyMemory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.Text.TranscodingStream.<g__WriteAsyncCore\|50_0>d | +| System.Threading.Tasks.ValueTask | [NullableAttribute(...)] | 0 | [0,1] | | System.Threading.Tasks.ValueTask System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder`1.Task | [NullableAttribute(...)] | 0 | [0,1] | | System.Threading.Tasks.ValueTask System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.Task | [NullableAttribute(...)] | 0 | [0,1] | +| System.Threading.Tasks.ValueTask System.Threading.Tasks.ValueTask.FromCanceled`1(System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Threading.Tasks.ValueTask System.IO.BufferedStream.ReadAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.BufferedStream.ReadFromUnderlyingStreamAsync(System.Memory,System.Threading.CancellationToken,System.Int32,System.Threading.Tasks.Task) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.BufferedStream.d__49 | +| System.Threading.Tasks.ValueTask System.IO.FileStream.ReadAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.MemoryStream.ReadAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.Strategies.BufferedFileStreamStrategy.ReadAsyncSlowPath(System.Threading.Tasks.Task,System.Memory,System.Threading.CancellationToken) | [AsyncMethodBuilderAttribute(...)] | 0 | System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1 | +| System.Threading.Tasks.ValueTask System.IO.Strategies.BufferedFileStreamStrategy.ReadAsyncSlowPath(System.Threading.Tasks.Task,System.Memory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Strategies.BufferedFileStreamStrategy.d__39 | +| System.Threading.Tasks.ValueTask System.IO.Strategies.BufferedFileStreamStrategy.ReadFromNonSeekableAsync(System.Memory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Strategies.BufferedFileStreamStrategy.d__38 | +| System.Threading.Tasks.ValueTask System.IO.Stream.g__FinishReadAsync\|44_0(System.Threading.Tasks.Task,System.Byte[],System.Memory) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.Stream.<g__FinishReadAsync\|44_0>d | +| System.Threading.Tasks.ValueTask System.IO.Stream.ReadAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.StreamReader.ReadAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.StreamReader.ReadAsyncInternal(System.Memory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamReader.d__68 | +| System.Threading.Tasks.ValueTask System.IO.StreamReader.ReadBlockAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.StreamReader.ReadBufferAsync(System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.StreamReader.d__71 | +| System.Threading.Tasks.ValueTask System.IO.StringReader.ReadAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.StringReader.ReadBlockAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.TextReader.ReadAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.TextReader.ReadBlockAsync(System.Memory,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Threading.Tasks.ValueTask System.IO.TextReader.ReadBlockAsyncInternal(System.Memory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.IO.TextReader.d__20 | +| System.Threading.Tasks.ValueTask System.Text.TranscodingStream.g__ReadAsyncCore\|41_0(System.Memory,System.Threading.CancellationToken) | [AsyncStateMachineAttribute(...)] | 0 | System.Text.TranscodingStream.<g__ReadAsyncCore\|41_0>d | | System.Threading.Tasks.ValueTask`1 | [AsyncMethodBuilderAttribute(...)] | 0 | System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder`1 | | System.Threading.Tasks.ValueTask`1 | [NullableAttribute(...)] | 0 | 0 | | System.Threading.Tasks.ValueTask`1 | [NullableContextAttribute(...)] | 0 | 1 | @@ -3352,6 +10038,7 @@ attrArgPositional | System.Threading.ThreadAbortException | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.ThreadAbortException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Threading.ThreadExceptionEventArgs | [NullableAttribute(...)] | 0 | 0 | +| System.Threading.ThreadExceptionEventArgs | [NullableAttribute(...)] | 0 | 1 | | System.Threading.ThreadExceptionEventArgs | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.ThreadInterruptedException | [NullableAttribute(...)] | 0 | 0 | | System.Threading.ThreadInterruptedException | [NullableContextAttribute(...)] | 0 | 2 | @@ -3363,6 +10050,7 @@ attrArgPositional | System.Threading.ThreadLocal`1 | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.ThreadPool | [NullableAttribute(...)] | 0 | 0 | | System.Threading.ThreadPool | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.ThreadPoolBoundHandle System.Threading.ThreadPoolBoundHandle.BindHandle(System.Runtime.InteropServices.SafeHandle) | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.ThreadStartException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Threading.ThreadStateException | [NullableAttribute(...)] | 0 | 0 | | System.Threading.ThreadStateException | [NullableContextAttribute(...)] | 0 | 2 | @@ -3381,8 +10069,11 @@ attrArgPositional | System.Threading.Volatile | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.WaitHandle | [NullableAttribute(...)] | 0 | 0 | | System.Threading.WaitHandle | [NullableContextAttribute(...)] | 0 | 1 | +| System.Threading.WaitHandle System.IO.Stream.CreateWaitHandle() | [ObsoleteAttribute(...)] | 0 | CreateWaitHandle has been deprecated. Use the ManualResetEvent(false) constructor instead. | | System.Threading.WaitHandle System.Threading.CancellationToken.WaitHandle | [NullableAttribute(...)] | 0 | 1 | +| System.Threading.WaitHandle System.Threading.CancellationToken.get_WaitHandle() | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.WaitHandle System.Threading.ManualResetEventSlim.WaitHandle | [NullableAttribute(...)] | 0 | 1 | +| System.Threading.WaitHandle System.Threading.ManualResetEventSlim.get_WaitHandle() | [NullableContextAttribute(...)] | 0 | 1 | | System.Threading.WaitHandleCannotBeOpenedException | [NullableAttribute(...)] | 0 | 0 | | System.Threading.WaitHandleCannotBeOpenedException | [NullableContextAttribute(...)] | 0 | 2 | | System.Threading.WaitHandleCannotBeOpenedException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -3390,18 +10081,50 @@ attrArgPositional | System.Threading.WaitHandleExtensions | [NullableContextAttribute(...)] | 0 | 1 | | System.TimeOnly System.TimeOnly.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.TimeOnly System.TimeOnly.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeOnly System.TimeOnly.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeOnly System.TimeOnly.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeOnly System.TimeOnly.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeOnly System.TimeOnly.Parse(System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeOnly System.TimeOnly.ParseExact(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeOnly System.TimeOnly.ParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeOnly System.TimeOnly.ParseExact(System.String,System.String[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeOnly System.TimeOnly.ParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.DateTimeStyles) | [NullableContextAttribute(...)] | 0 | 1 | | System.TimeSpan System.DateTime.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.DateTime.op_Subtraction(System.DateTime,System.DateTime) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.TimeSpan System.DateTimeOffset.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.DateTimeOffset.op_Subtraction(System.DateTimeOffset,System.DateTimeOffset) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeOnly.op_Subtraction(System.TimeOnly,System.TimeOnly) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.TimeSpan System.TimeSpan.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.TimeSpan System.TimeSpan.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.TimeSpan System.TimeSpan.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeSpan System.TimeSpan.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeSpan System.TimeSpan.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.ParseExact(System.String,System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeSpan System.TimeSpan.ParseExact(System.String,System.String,System.IFormatProvider,System.Globalization.TimeSpanStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeSpan System.TimeSpan.ParseExact(System.String,System.String[],System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeSpan System.TimeSpan.ParseExact(System.String,System.String[],System.IFormatProvider,System.Globalization.TimeSpanStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeSpan System.TimeSpan.op_Addition(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.op_Division(System.TimeSpan,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.op_Multiply(System.TimeSpan,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.op_Subtraction(System.TimeSpan,System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.op_UnaryNegation(System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.TimeSpan System.TimeSpan.op_UnaryPlus(System.TimeSpan) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.TimeZone | [NullableAttribute(...)] | 0 | 0 | | System.TimeZone | [NullableContextAttribute(...)] | 0 | 1 | | System.TimeZone | [ObsoleteAttribute(...)] | 0 | System.TimeZone has been deprecated. Investigate the use of System.TimeZoneInfo instead. | +| System.TimeZoneInfo | [NotNullWhenAttribute(...)] | 0 | True | | System.TimeZoneInfo | [NullableAttribute(...)] | 0 | 0 | | System.TimeZoneInfo | [NullableContextAttribute(...)] | 0 | 1 | | System.TimeZoneInfo | [TypeForwardedFromAttribute(...)] | 0 | System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.TimeZoneInfo System.TimeZoneInfo.CreateCustomTimeZone(System.String,System.TimeSpan,System.String,System.String,System.String,System.TimeZoneInfo.AdjustmentRule[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.TimeZoneInfo System.TimeZoneInfo.CreateCustomTimeZone(System.String,System.TimeSpan,System.String,System.String,System.String,System.TimeZoneInfo.AdjustmentRule[],System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.TimeZoneInfo.AdjustmentRule | [NotNullWhenAttribute(...)] | 0 | True | | System.TimeZoneInfo.AdjustmentRule | [NullableContextAttribute(...)] | 0 | 0 | +| System.TimeZoneInfo.AdjustmentRule System.TimeZoneInfo.AdjustmentRule.CreateAdjustmentRule(System.DateTime,System.DateTime,System.TimeSpan,System.TimeZoneInfo.TransitionTime,System.TimeZoneInfo.TransitionTime) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeZoneInfo.AdjustmentRule System.TimeZoneInfo.AdjustmentRule.CreateAdjustmentRule(System.DateTime,System.DateTime,System.TimeSpan,System.TimeZoneInfo.TransitionTime,System.TimeZoneInfo.TransitionTime,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 1 | +| System.TimeZoneInfo.AdjustmentRule[] | [NullableAttribute(...)] | 0 | [2,1] | | System.TimeZoneInfo.TransitionTime | [NullableContextAttribute(...)] | 0 | 0 | | System.TimeZoneNotFoundException | [NullableAttribute(...)] | 0 | 0 | | System.TimeZoneNotFoundException | [NullableContextAttribute(...)] | 0 | 2 | @@ -3411,6 +10134,27 @@ attrArgPositional | System.TimeoutException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.Tuple | [NullableAttribute(...)] | 0 | 0 | | System.Tuple | [NullableContextAttribute(...)] | 0 | 1 | +| System.Tuple> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple>> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple>> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple>> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple>> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple>> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple>> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple>> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple> | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple | [NullableAttribute(...)] | 0 | 1 | +| System.Tuple System.TupleExtensions.ToTuple`1(System.ValueTuple) | [NullableContextAttribute(...)] | 0 | 1 | | System.TupleExtensions | [NullableAttribute(...)] | 0 | 0 | | System.TupleExtensions | [NullableContextAttribute(...)] | 0 | 2 | | System.Tuple`1 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -3433,43 +10177,187 @@ attrArgPositional | System.Tuple`8 | [NullableAttribute(...)] | 0 | 0 | | System.Tuple`8 | [NullableContextAttribute(...)] | 0 | 1 | | System.Tuple`8 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 3 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 24 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 32 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 96 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 512 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 515 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 1536 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2048 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2607 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 6144 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Type | [NotNullWhenAttribute(...)] | 0 | True | | System.Type | [NullableAttribute(...)] | 0 | 0 | +| System.Type | [NullableAttribute(...)] | 0 | 1 | +| System.Type | [NullableAttribute(...)] | 0 | 2 | | System.Type | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type System.Exception.GetType() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type System.Nullable.GetUnderlyingType(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type System.Object.GetType() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type System.Reflection.Assembly.GetType(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Assembly.GetType(System.String,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Assembly.GetType(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Emit.AssemblyBuilder.GetType(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | | System.Type System.Reflection.Emit.ConstructorBuilder.DeclaringType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.ConstructorBuilder.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.ConstructorBuilder.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.ConstructorBuilder.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.DynamicMethod.DeclaringType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.DynamicMethod.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.DynamicMethod.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.DynamicMethod.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.EnumBuilder.BaseType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.EnumBuilder.CreateType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.EnumBuilder.DeclaringType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.EnumBuilder.GetElementType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.EnumBuilder.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Reflection.Emit.EnumBuilder.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | | System.Type System.Reflection.Emit.EnumBuilder.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.EnumBuilder.get_BaseType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.EnumBuilder.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.EnumBuilder.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.FieldBuilder.DeclaringType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.FieldBuilder.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.FieldBuilder.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.FieldBuilder.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.GenericTypeParameterBuilder.BaseType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.GenericTypeParameterBuilder.DeclaringType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2063:UnrecognizedReflectionPattern | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.MakeGenericType(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | | System.Type System.Reflection.Emit.GenericTypeParameterBuilder.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.get_BaseType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.GenericTypeParameterBuilder.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.MethodBuilder.DeclaringType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.MethodBuilder.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.MethodBuilder.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.MethodBuilder.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.ModuleBuilder.GetType(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Emit.ModuleBuilder.GetType(System.String,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Emit.ModuleBuilder.GetType(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Emit.ModuleBuilder.GetTypeNoLock(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Emit.ModuleBuilder.ResolveType(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | | System.Type System.Reflection.Emit.PropertyBuilder.DeclaringType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.PropertyBuilder.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.PropertyBuilder.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.PropertyBuilder.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.SymbolType.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Reflection.Emit.SymbolType.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Reflection.Emit.SymbolType.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2063:UnrecognizedReflectionPattern | +| System.Type System.Reflection.Emit.SymbolType.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | | System.Type System.Reflection.Emit.TypeBuilder.BaseType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.TypeBuilder.CreateType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Emit.TypeBuilder.DeclaringType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.TypeBuilder.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Reflection.Emit.TypeBuilder.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type System.Reflection.Emit.TypeBuilder.MakeGenericType(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | | System.Type System.Reflection.Emit.TypeBuilder.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.TypeBuilder.get_BaseType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.TypeBuilder.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.TypeBuilder.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2063:UnrecognizedReflectionPattern | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.MakeGenericType(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.Substitute(System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Reflection.Emit.TypeBuilderInstantiation.Substitute(System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2055:UnrecognizedReflectionPattern | | System.Type System.Reflection.FieldInfo.FieldType | [NullableAttribute(...)] | 0 | 1 | +| System.Type System.Reflection.FieldInfo.get_FieldType() | [NullableContextAttribute(...)] | 0 | 1 | | System.Type System.Reflection.MemberInfo.DeclaringType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Reflection.MemberInfo.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.MemberInfo.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.MemberInfo.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Reflection.Metadata.MetadataUpdateHandlerAttribute.HandlerType | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| System.Type System.Reflection.Module.GetType(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Module.GetType(System.String,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Module.GetType(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.Module.ResolveType(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Type System.Reflection.Module.ResolveType(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | | System.Type System.Reflection.PropertyInfo.PropertyType | [NullableAttribute(...)] | 0 | 1 | +| System.Type System.Reflection.PropertyInfo.get_PropertyType() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type System.Reflection.RuntimeAssembly.GetType(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.RuntimeExceptionHandlingClause.get_CatchType() | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Reflection.RuntimeExceptionHandlingClause.get_CatchType() | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Type System.Reflection.RuntimeModule.GetType(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type System.Reflection.RuntimeModule.ResolveType(System.Int32,System.Type[],System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimming changes metadata tokens | +| System.Type System.Reflection.SignatureType.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Reflection.SignatureType.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Reflection.SignatureType.GetInterface(System.String,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2063:UnrecognizedReflectionPattern | +| System.Type System.Reflection.SignatureType.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type System.Reflection.SignatureType.MakeGenericType(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Type System.Reflection.SignatureTypeExtensions.TryMakeGenericType(System.Type,System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Wrapper around MakeGenericType which itself has RequiresUnreferencedCode | +| System.Type System.Reflection.SignatureTypeExtensions.TryResolve(System.Reflection.SignatureType,System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Reflection.SignatureTypeExtensions.TryResolve(System.Reflection.SignatureType,System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | | System.Type System.Reflection.TypeDelegator.BaseType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.TypeDelegator.GetElementType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Reflection.TypeDelegator.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Reflection.TypeDelegator.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type System.Reflection.TypeDelegator.get_BaseType() | [NullableContextAttribute(...)] | 0 | 2 | | System.Type System.Resources.ResourceManager.ResourceManagerMediator.UserResourceSet | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | | System.Type System.Resources.ResourceManager.ResourceSetType | [DynamicallyAccessedMembersAttribute(...)] | 0 | 7 | +| System.Type System.Resources.ResourceReader.FindType(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Resources.ResourceReader.FindType(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Type System.Resources.ResourceReader.UseReflectionToGetType(System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The CustomResourceTypesSupport feature switch has been enabled for this app which is being trimmed. Custom readers as well as custom objects on the resources file are not observable by the trimmer and so required assemblies, types and members may be removed. | | System.Type System.Runtime.InteropServices.ComEventInterfaceAttribute.EventProvider | [DynamicallyAccessedMembersAttribute(...)] | 0 | 2607 | | System.Type System.Runtime.InteropServices.ComEventInterfaceAttribute.SourceInterface | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8 | +| System.Type System.Runtime.InteropServices.Marshal.GetTypeFromCLSID(System.Guid) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Runtime.InteropServices.Marshal.GetTypeFromCLSID(System.Guid) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.RuntimeType.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.RuntimeType.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type System.RuntimeType.MakeGenericType(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | +| System.Type System.RuntimeTypeHandle.GetTypeHelper(System.Type,System.Type[],System.IntPtr,System.Int32) | [RequiresUnreferencedCodeAttribute(...)] | 0 | MakeGenericType cannot be statically analyzed. It's not possible to guarantee the availability of requirements of the generic type. | | System.Type System.Type.BaseType | [NullableAttribute(...)] | 0 | 2 | | System.Type System.Type.DeclaringType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetElementType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetEnumUnderlyingType() | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type System.Type.GetEnumUnderlyingType() | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2085:UnrecognizedReflectionPattern | +| System.Type System.Type.GetInterface(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Type.GetInterface(System.String,System.Boolean) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type System.Type.GetNestedType(System.String) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 128 | +| System.Type System.Type.GetNestedType(System.String,System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type System.Type.GetType(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.Type.GetType(System.String,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.Type.GetType(System.String,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.Type.GetType(System.String,System.Func,System.Func) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.Type.GetType(System.String,System.Func,System.Func,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.Type.GetType(System.String,System.Func,System.Func,System.Boolean,System.Boolean) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.Type.GetTypeFromCLSID(System.Guid) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetTypeFromCLSID(System.Guid) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.GetTypeFromCLSID(System.Guid,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetTypeFromCLSID(System.Guid,System.Boolean) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.GetTypeFromCLSID(System.Guid,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetTypeFromCLSID(System.Guid,System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.GetTypeFromCLSID(System.Guid,System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetTypeFromCLSID(System.Guid,System.String,System.Boolean) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.GetTypeFromProgID(System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.GetTypeFromProgID(System.String,System.Boolean) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.GetTypeFromProgID(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetTypeFromProgID(System.String,System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.GetTypeFromProgID(System.String,System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.GetTypeFromProgID(System.String,System.String,System.Boolean) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Type System.Type.MakeGenericType(System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | If some of the generic arguments are annotated (either with DynamicallyAccessedMembersAttribute, or generic constraints), trimming can't validate that the requirements of those annotations are met. | | System.Type System.Type.ReflectedType | [NullableAttribute(...)] | 0 | 2 | +| System.Type System.Type.ReflectionOnlyGetType(System.String,System.Boolean,System.Boolean) | [ObsoleteAttribute(...)] | 0 | ReflectionOnly loading is not supported and throws PlatformNotSupportedException. | +| System.Type System.Type.get_BaseType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.get_DeclaringType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.Type.get_ReflectedType() | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type System.TypeNameParser.ConstructType(System.Func,System.Func,System.Boolean,System.Boolean,System.Threading.StackCrawlMark) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.TypeNameParser.GetType(System.String,System.Func,System.Func,System.Boolean,System.Boolean,System.Threading.StackCrawlMark) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | +| System.Type System.TypeNameParser.ResolveType(System.Reflection.Assembly,System.String[],System.Func,System.Boolean,System.Boolean,System.Threading.StackCrawlMark) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The type might be removed | | System.TypeAccessException | [NullableAttribute(...)] | 0 | 0 | | System.TypeAccessException | [NullableContextAttribute(...)] | 0 | 2 | | System.TypeAccessException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.TypeCode System.Type.GetTypeCode(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | | System.TypeInitializationException | [NullableAttribute(...)] | 0 | 0 | | System.TypeInitializationException | [NullableContextAttribute(...)] | 0 | 1 | | System.TypeInitializationException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -3479,28 +10367,416 @@ attrArgPositional | System.TypeUnloadedException | [NullableAttribute(...)] | 0 | 0 | | System.TypeUnloadedException | [NullableContextAttribute(...)] | 0 | 2 | | System.TypeUnloadedException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Type[] | [NotNullWhenAttribute(...)] | 0 | False | +| System.Type[] | [NullableAttribute(...)] | 0 | 1 | +| System.Type[] | [NullableAttribute(...)] | 0 | [2,1] | +| System.Type[] System.Reflection.Assembly.GetExportedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.Assembly.GetForwardedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.Assembly.GetTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.Emit.AssemblyBuilder.GetExportedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.Emit.EnumBuilder.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.Emit.EnumBuilder.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Reflection.Emit.GenericTypeParameterBuilder.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.Emit.GenericTypeParameterBuilder.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Reflection.Emit.InternalAssemblyBuilder.GetExportedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.Emit.ModuleBuilder.GetTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.Emit.SymbolType.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.Emit.SymbolType.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Reflection.Emit.TypeBuilder.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.Emit.TypeBuilder.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Reflection.Emit.TypeBuilderInstantiation.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.Emit.TypeBuilderInstantiation.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Reflection.FieldInfo.GetOptionalCustomModifiers() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type[] System.Reflection.FieldInfo.GetRequiredCustomModifiers() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type[] System.Reflection.MethodBase.GetGenericArguments() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type[] System.Reflection.Module.FindTypes(System.Reflection.TypeFilter,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Type[] System.Reflection.Module.FindTypes(System.Reflection.TypeFilter,System.Object) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.Module.GetTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.PropertyInfo.GetOptionalCustomModifiers() | [NullableContextAttribute(...)] | 0 | 1 | +| System.Type[] System.Reflection.PropertyInfo.GetRequiredCustomModifiers() | [NullableContextAttribute(...)] | 0 | 1 | | System.Type[] System.Reflection.ReflectionTypeLoadException.Types | [NullableAttribute(...)] | 0 | [1,2] | +| System.Type[] System.Reflection.RuntimeAssembly.GetExportedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.RuntimeAssembly.GetForwardedTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.RuntimeModule.GetTypes() | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed | +| System.Type[] System.Reflection.SignatureType.FindInterfaces(System.Reflection.TypeFilter,System.Object) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.SignatureType.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.SignatureType.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Reflection.TypeDelegator.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Reflection.TypeDelegator.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Reflection.TypeInfo.g__GetDeclaredOnlyNestedTypes\|22_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Type[] System.Reflection.TypeInfo.g__GetDeclaredOnlyNestedTypes\|22_0(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | +| System.Type[] System.RuntimeType.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.RuntimeType.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[] System.Type.FindInterfaces(System.Reflection.TypeFilter,System.Object) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Type.GetInterfaces() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 8192 | +| System.Type[] System.Type.GetNestedTypes() | [DynamicallyAccessedMembersAttribute(...)] | 0 | 128 | +| System.Type[] System.Type.GetNestedTypes(System.Reflection.BindingFlags) | [DynamicallyAccessedMembersAttribute(...)] | 0 | 384 | +| System.Type[][] | [NullableAttribute(...)] | 0 | [2,1,1] | | System.TypedReference | [CLSCompliantAttribute(...)] | 0 | False | | System.TypedReference | [NullableAttribute(...)] | 0 | 0 | | System.TypedReference | [NullableContextAttribute(...)] | 0 | 1 | +| System.TypedReference System.ArgIterator.GetNextArg() | [CLSCompliantAttribute(...)] | 0 | False | +| System.TypedReference System.ArgIterator.GetNextArg(System.RuntimeTypeHandle) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.BitConverter.HalfToUInt16Bits(System.Half) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.BitConverter.ToUInt16(System.Byte[],System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.BitConverter.ToUInt16(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.BitConverter.ToUInt16(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.UInt16 System.Buffers.Binary.BinaryPrimitives.ReadUInt16BigEndian(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Buffers.Binary.BinaryPrimitives.ReadUInt16LittleEndian(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Byte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.DateTime) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Double) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Int16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Object,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.Single) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.String,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.String,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Convert.ToUInt16(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Decimal.ToUInt16(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Decimal.op_Explicit(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.IO.BinaryReader.ReadUInt16() | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.IO.UnmanagedMemoryAccessor.ReadUInt16(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Math.Clamp(System.UInt16,System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Math.Max(System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Math.Min(System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Runtime.Serialization.SerializationInfo.GetUInt16(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Threading.Thread.VolatileRead(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.Threading.Volatile.Read(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt16 System.UInt16.Abs(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Clamp(System.UInt16,System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.LeadingZeroCount(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Log2(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Max(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Min(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt16 System.UInt16.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt16 System.UInt16.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt16 System.UInt16.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt16 System.UInt16.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.PopCount(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.RotateLeft(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.RotateRight(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.Sign(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.TrailingZeroCount(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_Addition(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_BitwiseAnd(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_BitwiseOr(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_Decrement(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_Division(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_ExclusiveOr(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_Increment(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_LeftShift(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_Modulus(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_Multiply(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_OnesComplement(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_RightShift(System.UInt16,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_Subtraction(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_UnaryNegation(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt16 System.UInt16.op_UnaryPlus(System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.BitConverter.SingleToUInt32Bits(System.Single) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.BitConverter.ToUInt32(System.Byte[],System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.BitConverter.ToUInt32(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.BitConverter.ToUInt32(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.UInt32 System.Buffers.Binary.BinaryPrimitives.ReadUInt32BigEndian(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Buffers.Binary.BinaryPrimitives.ReadUInt32LittleEndian(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Byte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.DateTime) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Double) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Int16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Object,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.Single) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.String,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.String,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Convert.ToUInt32(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Decimal.ToUInt32(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Decimal.op_Explicit(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.IO.BinaryReader.ReadUInt32() | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.IO.UnmanagedMemoryAccessor.ReadUInt32(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Math.Clamp(System.UInt32,System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Math.Max(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Math.Min(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Numerics.BitOperations.RotateLeft(System.UInt32,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Numerics.BitOperations.RotateRight(System.UInt32,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Numerics.BitOperations.RoundUpToPowerOf2(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Runtime.Serialization.SerializationInfo.GetUInt32(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Interlocked.Add(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Interlocked.And(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Interlocked.CompareExchange(System.UInt32,System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Interlocked.Decrement(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Interlocked.Exchange(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Interlocked.Increment(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Interlocked.Or(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Thread.VolatileRead(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.Threading.Volatile.Read(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt32 System.UInt32.Abs(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Clamp(System.UInt32,System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.LeadingZeroCount(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Log2(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Max(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Min(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt32 System.UInt32.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt32 System.UInt32.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt32 System.UInt32.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt32 System.UInt32.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.PopCount(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.RotateLeft(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.RotateRight(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.Sign(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.TrailingZeroCount(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_Addition(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_BitwiseAnd(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_BitwiseOr(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_Decrement(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_Division(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_ExclusiveOr(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_Increment(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_LeftShift(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_Modulus(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_Multiply(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_OnesComplement(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_RightShift(System.UInt32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_Subtraction(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_UnaryNegation(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt32 System.UInt32.op_UnaryPlus(System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.BitConverter.DoubleToUInt64Bits(System.Double) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.BitConverter.ToUInt64(System.Byte[],System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.BitConverter.ToUInt64(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.BitConverter.ToUInt64(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.UInt64 System.Buffers.Binary.BinaryPrimitives.ReadUInt64BigEndian(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Buffers.Binary.BinaryPrimitives.ReadUInt64LittleEndian(System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Buffers.Binary.BinaryPrimitives.ReverseEndianness(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Byte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Char) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.DateTime) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Double) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Int16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Object,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.Single) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.String,System.IFormatProvider) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.String,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Convert.ToUInt64(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Decimal.ToUInt64(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Decimal.op_Explicit(System.Decimal) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.IO.BinaryReader.ReadUInt64() | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.IO.UnmanagedMemoryAccessor.ReadUInt64(System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Math.BigMul(System.UInt64,System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Math.Clamp(System.UInt64,System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Math.Max(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Math.Min(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Numerics.BitOperations.RotateLeft(System.UInt64,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Numerics.BitOperations.RotateRight(System.UInt64,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Numerics.BitOperations.RoundUpToPowerOf2(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Runtime.Serialization.SerializationInfo.GetUInt64(System.String) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.Add(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.And(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.CompareExchange(System.UInt64,System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.Decrement(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.Exchange(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.Increment(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.Or(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Interlocked.Read(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Thread.VolatileRead(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.Threading.Volatile.Read(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UInt64 System.UInt64.Abs(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Clamp(System.UInt64,System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.LeadingZeroCount(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Log2(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Max(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Min(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt64 System.UInt64.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt64 System.UInt64.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt64 System.UInt64.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UInt64 System.UInt64.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.PopCount(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.RotateLeft(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.RotateRight(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.Sign(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.TrailingZeroCount(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_Addition(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_BitwiseAnd(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_BitwiseOr(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_Decrement(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_Division(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_ExclusiveOr(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_Increment(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_LeftShift(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_Modulus(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_Multiply(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_OnesComplement(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_RightShift(System.UInt64,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_Subtraction(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_UnaryNegation(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UInt64 System.UInt64.op_UnaryPlus(System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UIntPtr | [CLSCompliantAttribute(...)] | 0 | False | | System.UIntPtr | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.UIntPtr System.Math.Clamp(System.UIntPtr,System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UIntPtr System.Math.Max(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UIntPtr System.Math.Min(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UIntPtr System.Runtime.InteropServices.NFloat.op_Explicit(System.Runtime.InteropServices.NFloat) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UIntPtr System.Threading.Thread.VolatileRead(System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UIntPtr System.Threading.Volatile.Read(System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.UIntPtr System.UIntPtr.Abs(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UIntPtr System.UIntPtr.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Clamp(System.UIntPtr,System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.CreateSaturating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.CreateTruncating`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Create`1(!0) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.LeadingZeroCount(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Log2(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Max(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UIntPtr System.UIntPtr.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Min(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UIntPtr System.UIntPtr.MinValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UIntPtr System.UIntPtr.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UIntPtr System.UIntPtr.One | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Parse(System.ReadOnlySpan,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Parse(System.ReadOnlySpan,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UIntPtr System.UIntPtr.Parse(System.String,System.Globalization.NumberStyles) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UIntPtr System.UIntPtr.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UIntPtr System.UIntPtr.Parse(System.String,System.Globalization.NumberStyles,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Parse(System.String,System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 1 | +| System.UIntPtr System.UIntPtr.Parse(System.String,System.IFormatProvider) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.PopCount(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.RotateLeft(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.RotateRight(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.Sign(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.TrailingZeroCount(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UIntPtr System.UIntPtr.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_Addition(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_BitwiseAnd(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_BitwiseOr(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_Decrement(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_Division(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_ExclusiveOr(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_Increment(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_LeftShift(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_Modulus(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_Multiply(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_OnesComplement(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_RightShift(System.UIntPtr,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_Subtraction(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_UnaryNegation(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.UIntPtr System.UIntPtr.op_UnaryPlus(System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.UnauthorizedAccessException | [NullableAttribute(...)] | 0 | 0 | | System.UnauthorizedAccessException | [NullableContextAttribute(...)] | 0 | 2 | | System.UnauthorizedAccessException | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.UnhandledExceptionEventArgs | [NullableAttribute(...)] | 0 | 0 | +| System.UnhandledExceptionEventArgs | [NullableAttribute(...)] | 0 | 1 | | System.UnhandledExceptionEventArgs | [NullableContextAttribute(...)] | 0 | 1 | | System.ValueTuple | [NullableAttribute(...)] | 0 | 0 | | System.ValueTuple | [NullableContextAttribute(...)] | 0 | 1 | | System.ValueTuple | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0] | +| System.ValueTuple> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1] | +| System.ValueTuple> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1] | +| System.ValueTuple> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1] | +| System.ValueTuple> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1] | +| System.ValueTuple> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1] | +| System.ValueTuple> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1] | +| System.ValueTuple>> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1] | +| System.ValueTuple>> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1,0,1,1,1,1,1,1] | +| System.ValueTuple>> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1,0,1,1,1,1,1] | +| System.ValueTuple>> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1,0,1,1,1,1] | +| System.ValueTuple>> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1,0,1,1,1] | +| System.ValueTuple>> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1,0,1,1] | +| System.ValueTuple>> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1,0,1] | +| System.ValueTuple> | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1,0,1,1,1,1,1,1,1] | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1,1] | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1,1] | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1,1,1,1,1] | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1,1,1,1] | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1,1,1] | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1,1] | +| System.ValueTuple | [NullableAttribute(...)] | 0 | [0,1] | +| System.ValueTuple System.TupleExtensions.ToValueTuple`1(System.Tuple) | [NullableContextAttribute(...)] | 0 | 1 | +| System.ValueTuple System.Byte.DivRem(System.Byte,System.Byte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple | [TupleElementNamesAttribute(...)] | 0 | [value,startIndex,length] | +| System.ValueTuple | [TupleElementNamesAttribute(...)] | 0 | [encoding,bytes,index] | +| System.ValueTuple | [TupleElementNamesAttribute(...)] | 0 | [encoding,bytes] | +| System.ValueTuple System.Char.DivRem(System.Char,System.Char) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Decimal.DivRem(System.Decimal,System.Decimal) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Double.DivRem(System.Double,System.Double) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Half.DivRem(System.Half,System.Half) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple | [TupleElementNamesAttribute(...)] | 0 | [Ptr,Length,casing] | +| System.ValueTuple System.Int16.DivRem(System.Int16,System.Int16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Console.GetCursorPosition() | [NullableContextAttribute(...)] | 0 | 0 | +| System.ValueTuple System.Console.GetCursorPosition() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.ValueTuple System.Console.GetCursorPosition() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.ValueTuple System.Console.GetCursorPosition() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.ValueTuple System.Console.GetCursorPosition() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.ValueTuple System.Int32.DivRem(System.Int32,System.Int32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple | [TupleElementNamesAttribute(...)] | 0 | [s,i] | +| System.ValueTuple System.Int64.DivRem(System.Int64,System.Int64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.IntPtr.DivRem(System.IntPtr,System.IntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.ValueTuple System.Runtime.DependentHandle.TargetAndDependent | [NullableAttribute(...)] | 0 | [0,2,2] | | System.ValueTuple System.Runtime.DependentHandle.TargetAndDependent | [TupleElementNamesAttribute(...)] | 0 | [Target,Dependent] | +| System.ValueTuple | [TupleElementNamesAttribute(...)] | 0 | [d,state] | +| System.ValueTuple System.Math.DivRem(System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.ValueTuple System.SByte.DivRem(System.SByte,System.SByte) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Single.DivRem(System.Single,System.Single) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Math.DivRem(System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.ValueTuple System.UInt16.DivRem(System.UInt16,System.UInt16) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Math.DivRem(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.ValueTuple System.UInt32.DivRem(System.UInt32,System.UInt32) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Math.DivRem(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.ValueTuple System.UInt64.DivRem(System.UInt64,System.UInt64) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| System.ValueTuple System.Math.DivRem(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.ValueTuple System.UIntPtr.DivRem(System.UIntPtr,System.UIntPtr) | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | System.ValueTuple`1 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | System.ValueTuple`1.Item1 | [NullableAttribute(...)] | 0 | 1 | | System.ValueTuple`2 | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -3531,9 +10807,1046 @@ attrArgPositional | System.ValueType | [NullableAttribute(...)] | 0 | 0 | | System.ValueType | [NullableContextAttribute(...)] | 0 | 2 | | System.ValueType | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Version | [NotNullWhenAttribute(...)] | 0 | True | | System.Version | [NullableAttribute(...)] | 0 | 0 | +| System.Version | [NullableAttribute(...)] | 0 | 2 | | System.Version | [NullableContextAttribute(...)] | 0 | 2 | | System.Version | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | +| System.Version System.Version.Parse(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Version System.Version.Parse(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void Internal.Console.Write(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void Internal.Console.WriteLine(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void Internal.Runtime.CompilerServices.Unsafe.WriteUnaligned`1(System.Void*,!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void Internal.Runtime.CompilerServices.Unsafe.Write`1(System.Void*,!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void Internal.Runtime.InteropServices.IClassFactory.CreateInstance(System.Object,System.Guid,System.IntPtr) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Built-in COM support is not trim compatible | +| System.Void Internal.Runtime.InteropServices.IsolatedComponentLoadContext..ctor(System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The trimmer might remove assemblies that are loaded by this class | +| System.Void System.AccessViolationException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`1.Invoke(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`2.Invoke(!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`3.Invoke(!0,!1,!2) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`4..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`4.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`4.Invoke(!0,!1,!2,!3) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`5..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`5.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`5.Invoke(!0,!1,!2,!3,!4) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`6..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`6.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`6.Invoke(!0,!1,!2,!3,!4,!5) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`7..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`7.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`7.Invoke(!0,!1,!2,!3,!4,!5,!6) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`8..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`8.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`8.Invoke(!0,!1,!2,!3,!4,!5,!6,!7) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`9..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`9.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`9.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`10..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`10.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`10.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`11..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`11.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`11.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`12..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`12.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`12.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`13..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`13.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`13.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`14..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`14.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`14.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`15..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`15.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`15.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Action`16..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`16.EndInvoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Action`16.Invoke(!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.AggregateException..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppContext.SetData(System.String,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.AppContext.SetSwitch(System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.AppDomain.AppendPrivatePath(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.AppendPrivatePath(System.String) | [ObsoleteAttribute(...)] | 0 | AppDomain.AppendPrivatePath has been deprecated and is not supported. | +| System.Void System.AppDomain.ClearPrivatePath() | [ObsoleteAttribute(...)] | 0 | AppDomain.ClearPrivatePath has been deprecated and is not supported. | +| System.Void System.AppDomain.ClearShadowCopyPath() | [ObsoleteAttribute(...)] | 0 | AppDomain.ClearShadowCopyPath has been deprecated and is not supported. | +| System.Void System.AppDomain.SetCachePath(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.SetCachePath(System.String) | [ObsoleteAttribute(...)] | 0 | AppDomain.SetCachePath has been deprecated and is not supported. | +| System.Void System.AppDomain.SetDynamicBase(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.SetDynamicBase(System.String) | [ObsoleteAttribute(...)] | 0 | AppDomain.SetDynamicBase has been deprecated and is not supported. | +| System.Void System.AppDomain.SetShadowCopyFiles() | [ObsoleteAttribute(...)] | 0 | AppDomain.SetShadowCopyFiles has been deprecated and is not supported. | +| System.Void System.AppDomain.SetShadowCopyPath(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.SetShadowCopyPath(System.String) | [ObsoleteAttribute(...)] | 0 | AppDomain.SetShadowCopyPath has been deprecated and is not supported. | +| System.Void System.AppDomain.Unload(System.AppDomain) | [ObsoleteAttribute(...)] | 0 | Creating and unloading AppDomains is not supported and throws an exception. | +| System.Void System.AppDomain.add_AssemblyLoad(System.AssemblyLoadEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.add_AssemblyResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.add_DomainUnload(System.EventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.add_ProcessExit(System.EventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.add_ReflectionOnlyAssemblyResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.add_ResourceResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.add_TypeResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.add_UnhandledException(System.UnhandledExceptionEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_AssemblyLoad(System.AssemblyLoadEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_AssemblyResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_DomainUnload(System.EventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_ProcessExit(System.EventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_ReflectionOnlyAssemblyResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_ResourceResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_TypeResolve(System.ResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomain.remove_UnhandledException(System.UnhandledExceptionEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.AppDomainUnloadedException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ApplicationException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ArgIterator..ctor(System.RuntimeArgumentHandle,System.Void*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.ArgumentException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ArgumentException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ArgumentNullException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ArgumentOutOfRangeException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ArgumentOutOfRangeException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ArithmeticException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Array.Resize`1(!0[],System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.SetValue(System.Object,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.SetValue(System.Object,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.SetValue(System.Object,System.Int32,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.SetValue(System.Object,System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.SetValue(System.Object,System.Int64,System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.SetValue(System.Object,System.Int64,System.Int64,System.Int64) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.Sort(System.Array,System.Array,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.Sort(System.Array,System.Array,System.Int32,System.Int32,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.Sort`2(!0[],!1[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.Sort`2(!0[],!1[],System.Collections.Generic.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.Sort`2(!0[],!1[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Array.Sort`2(!0[],!1[],System.Int32,System.Int32,System.Collections.Generic.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.ArrayTypeMismatchException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.AssemblyLoadEventHandler.Invoke(System.Object,System.AssemblyLoadEventArgs) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.AsyncCallback.Invoke(System.IAsyncResult) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.BadImageFormatException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.BadImageFormatException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Buffer.MemoryCopy(System.Void*,System.Void*,System.Int64,System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffer.MemoryCopy(System.Void*,System.Void*,System.Int64,System.Int64) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Buffer.MemoryCopy(System.Void*,System.Void*,System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffer.MemoryCopy(System.Void*,System.Void*,System.UInt64,System.UInt64) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Buffers.ArrayPoolEventSource.BufferAllocated(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferAllocatedReason) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Buffers.ArrayPoolEventSource.BufferAllocated(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferAllocatedReason) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Buffers.ArrayPoolEventSource.BufferDropped(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferDroppedReason) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Buffers.ArrayPoolEventSource.BufferDropped(System.Int32,System.Int32,System.Int32,System.Int32,System.Buffers.ArrayPoolEventSource.BufferDroppedReason) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Void System.Buffers.ArrayPoolEventSource.BufferRented(System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Buffers.ArrayPoolEventSource.BufferRented(System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Buffers.Binary.BinaryPrimitives.WriteUInt16BigEndian(System.Span,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffers.Binary.BinaryPrimitives.WriteUInt16LittleEndian(System.Span,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffers.Binary.BinaryPrimitives.WriteUInt32BigEndian(System.Span,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffers.Binary.BinaryPrimitives.WriteUInt32LittleEndian(System.Span,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffers.Binary.BinaryPrimitives.WriteUInt64BigEndian(System.Span,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffers.Binary.BinaryPrimitives.WriteUInt64LittleEndian(System.Span,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffers.MemoryHandle..ctor(System.Void*,System.Runtime.InteropServices.GCHandle,System.Buffers.IPinnable) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Buffers.ReadOnlySpanAction`2.Invoke(System.ReadOnlySpan,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Buffers.SpanAction`2.Invoke(System.Span,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.CannotUnloadAppDomainException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.Write(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.Write(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.Write(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.Write(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.WriteLine(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.WriteLine(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.WriteLine(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.WriteLine(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.WriteLine(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.CodeDom.Compiler.IndentedTextWriter.WriteLineNoTabs(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.ArrayList.Insert(System.Int32,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.ArrayList.Remove(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.ArrayList.Sort(System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.ArrayList.Sort(System.Int32,System.Int32,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.ArrayList.set_Item(System.Int32,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.DictionaryEntry.Deconstruct(System.Object,System.Object) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.Collections.DictionaryEntry.set_Value(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Generic.Dictionary`2.KeyCollection..ctor(System.Collections.Generic.Dictionary) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Generic.Dictionary`2.KeyCollection.CopyTo(!0[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Generic.Dictionary`2.OnDeserialization(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Generic.Dictionary`2.ValueCollection..ctor(System.Collections.Generic.Dictionary) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Generic.Dictionary`2.ValueCollection.CopyTo(!1[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Generic.EnumEqualityComparer`1.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Generic.HashSet`1.OnDeserialization(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Generic.KeyNotFoundException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Generic.KeyValuePair`2.Deconstruct(!0,!1) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Generic.NonRandomizedStringEqualityComparer..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Collections.Hashtable..ctor(System.Collections.IDictionary,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Collections.IDictionary,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use Hashtable(IDictionary, IEqualityComparer) instead. | +| System.Void System.Collections.Hashtable..ctor(System.Collections.IDictionary,System.Single,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Collections.IDictionary,System.Single,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use Hashtable(IDictionary, float, IEqualityComparer) instead. | +| System.Void System.Collections.Hashtable..ctor(System.Collections.IEqualityComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Collections.IHashCodeProvider,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Collections.IHashCodeProvider,System.Collections.IComparer) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use Hashtable(IEqualityComparer) instead. | +| System.Void System.Collections.Hashtable..ctor(System.Int32,System.Collections.IEqualityComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Int32,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Int32,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use Hashtable(int, IEqualityComparer) instead. | +| System.Void System.Collections.Hashtable..ctor(System.Int32,System.Single,System.Collections.IEqualityComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Int32,System.Single,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable..ctor(System.Int32,System.Single,System.Collections.IHashCodeProvider,System.Collections.IComparer) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use Hashtable(int, float, IEqualityComparer) instead. | +| System.Void System.Collections.Hashtable.OnDeserialization(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable.set_comparer(System.Collections.IComparer) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Collections.Hashtable.set_hcp(System.Collections.IHashCodeProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.ComponentModel.DefaultValueAttribute..ctor(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.ComponentModel.DefaultValueAttribute..ctor(System.Type,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ComponentModel.DefaultValueAttribute..ctor(System.Type,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Generic TypeConverters may require the generic types to be annotated. For example, NullableConverter requires the underlying type to be DynamicallyAccessedMembers All. | +| System.Void System.ComponentModel.DefaultValueAttribute..ctor(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.ComponentModel.DefaultValueAttribute..ctor(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.ComponentModel.DefaultValueAttribute..ctor(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Console.Beep() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.Beep() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Console.Beep() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.Beep() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.Beep(System.Int32,System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.Clear() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.Clear() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.Clear() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.MoveBufferArea(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.MoveBufferArea(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Char,System.ConsoleColor,System.ConsoleColor) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.ResetColor() | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.ResetColor() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Console.ResetColor() | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.ResetColor() | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.SetBufferSize(System.Int32,System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.SetCursorPosition(System.Int32,System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.SetCursorPosition(System.Int32,System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Console.SetCursorPosition(System.Int32,System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.SetCursorPosition(System.Int32,System.Int32) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.SetIn(System.IO.TextReader) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.SetIn(System.IO.TextReader) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Console.SetIn(System.IO.TextReader) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.SetIn(System.IO.TextReader) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.SetWindowPosition(System.Int32,System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.SetWindowSize(System.Int32,System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.Write(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.Write(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.Write(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.Write(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.Write(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.Write(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Console.Write(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Console.WriteLine(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.WriteLine(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.WriteLine(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.WriteLine(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.WriteLine(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.WriteLine(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Console.WriteLine(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Console.add_CancelKeyPress(System.ConsoleCancelEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.remove_CancelKeyPress(System.ConsoleCancelEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Console.set_BufferHeight(System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.set_BufferWidth(System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.set_CursorSize(System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.set_CursorVisible(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.set_CursorVisible(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Console.set_CursorVisible(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.set_CursorVisible(System.Boolean) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.set_OutputEncoding(System.Text.Encoding) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.set_OutputEncoding(System.Text.Encoding) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.set_OutputEncoding(System.Text.Encoding) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.set_Title(System.String) | [UnsupportedOSPlatformAttribute(...)] | 0 | android | +| System.Void System.Console.set_Title(System.String) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Console.set_Title(System.String) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.Console.set_Title(System.String) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.Console.set_WindowHeight(System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.set_WindowLeft(System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.set_WindowTop(System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Console.set_WindowWidth(System.Int32) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.ConsoleCancelEventHandler.Invoke(System.Object,System.ConsoleCancelEventArgs) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ContextMarshalException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.CultureAwareComparer.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DateOnly..ctor(System.Int32,System.Int32,System.Int32,System.Globalization.Calendar) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DateTime..ctor(System.Int32,System.Int32,System.Int32,System.Globalization.Calendar) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DateTime..ctor(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Globalization.Calendar) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DateTime..ctor(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Globalization.Calendar) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DateTime..ctor(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Globalization.Calendar,System.DateTimeKind) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DateTimeOffset..ctor(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Globalization.Calendar,System.TimeSpan) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Decimal..ctor(System.Int32[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Decimal..ctor(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Decimal..ctor(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Delegate..ctor(System.Object,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The target method might be removed | +| System.Void System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute..ctor(System.Diagnostics.CodeAnalysis.DynamicallyAccessedMemberTypes,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute..ctor(System.Diagnostics.CodeAnalysis.DynamicallyAccessedMemberTypes,System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute..ctor(System.String,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.CodeAnalysis.DynamicDependencyAttribute..ctor(System.String,System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.CodeAnalysis.RequiresAssemblyFilesAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.CodeAnalysis.RequiresUnreferencedCodeAttribute.set_Url(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Diagnostics.CodeAnalysis.SuppressMessageAttribute..ctor(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.CodeAnalysis.UnconditionalSuppressMessageAttribute..ctor(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Contracts.Contract.Assert(System.Boolean) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Assert(System.Boolean) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Contracts.Contract.Assert(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Assert(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Contracts.Contract.Assert(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Diagnostics.Contracts.Contract.Assume(System.Boolean) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Assume(System.Boolean) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Contracts.Contract.Assume(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Assume(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Contracts.Contract.Assume(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Diagnostics.Contracts.Contract.EndContractBlock() | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Ensures(System.Boolean) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Ensures(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Ensures(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Diagnostics.Contracts.Contract.EnsuresOnThrow`1(System.Boolean) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.EnsuresOnThrow`1(System.Boolean) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Contracts.Contract.EnsuresOnThrow`1(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.EnsuresOnThrow`1(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Contracts.Contract.Invariant(System.Boolean) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Invariant(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Invariant(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Diagnostics.Contracts.Contract.Requires(System.Boolean) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Requires(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | CONTRACTS_FULL | +| System.Void System.Diagnostics.Contracts.Contract.Requires(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Diagnostics.Contracts.Contract.Requires`1(System.Boolean) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Contracts.Contract.Requires`1(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Contracts.ContractException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.Assert(System.Boolean) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Assert(System.Boolean,System.Diagnostics.Debug.AssertInterpolatedStringHandler) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Assert(System.Boolean,System.Diagnostics.Debug.AssertInterpolatedStringHandler,System.Diagnostics.Debug.AssertInterpolatedStringHandler) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Assert(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Assert(System.Boolean,System.String,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Assert(System.Boolean,System.String,System.String,System.Object[]) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Assert(System.Boolean,System.String,System.String,System.Object[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.AssertInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Debug.AssertInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Debug.AssertInterpolatedStringHandler.AppendFormatted`1(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.AssertInterpolatedStringHandler.AppendFormatted`1(!0,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.AssertInterpolatedStringHandler.AppendLiteral(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.Close() | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Fail(System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Fail(System.String,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Flush() | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Indent() | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Print(System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Print(System.String,System.Object[]) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Print(System.String,System.Object[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.Unindent() | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Write(System.Object) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Write(System.Object,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Write(System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.Write(System.String,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteIf(System.Boolean,System.Diagnostics.Debug.WriteIfInterpolatedStringHandler) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteIf(System.Boolean,System.Diagnostics.Debug.WriteIfInterpolatedStringHandler,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteIf(System.Boolean,System.Object) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteIf(System.Boolean,System.Object,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteIf(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteIf(System.Boolean,System.String,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteIfInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Debug.WriteIfInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Debug.WriteIfInterpolatedStringHandler.AppendFormatted`1(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.WriteIfInterpolatedStringHandler.AppendFormatted`1(!0,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.WriteIfInterpolatedStringHandler.AppendLiteral(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.WriteLine(System.Object) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLine(System.Object,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLine(System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLine(System.String,System.Object[]) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLine(System.String,System.Object[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Debug.WriteLine(System.String,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLineIf(System.Boolean,System.Diagnostics.Debug.WriteIfInterpolatedStringHandler) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLineIf(System.Boolean,System.Diagnostics.Debug.WriteIfInterpolatedStringHandler,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLineIf(System.Boolean,System.Object) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLineIf(System.Boolean,System.Object,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLineIf(System.Boolean,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Debug.WriteLineIf(System.Boolean,System.String,System.String) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.DebugProvider.FailCore(System.String,System.String,System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebugProvider.WriteCore(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerTypeProxyAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerTypeProxyAttribute..ctor(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute..ctor(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute..ctor(System.String,System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute..ctor(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute..ctor(System.Type,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.DebuggerVisualizerAttribute..ctor(System.Type,System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Tracing.EventCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | 512 | +| System.Void System.Diagnostics.Tracing.EventCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 1 | System.Diagnostics.Tracing.CounterPayload | +| System.Void System.Diagnostics.Tracing.EventCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Tracing.EventSource..ctor(System.String,System.Diagnostics.Tracing.EventSourceSettings) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Tracing.EventSource..ctor(System.String,System.Diagnostics.Tracing.EventSourceSettings,System.String[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Tracing.EventSource.AssertValidString(System.Diagnostics.Tracing.EventSource.EventData*) | [ConditionalAttribute(...)] | 0 | DEBUG | +| System.Void System.Diagnostics.Tracing.EventSource.OnEventCommand(System.Diagnostics.Tracing.EventCommandEventArgs) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Tracing.EventSource.SendCommand(System.Diagnostics.Tracing.EventSource,System.Diagnostics.Tracing.EventCommand,System.Collections.Generic.IDictionary) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Tracing.EventSource.Write(System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.Write(System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.Write(System.String,System.Diagnostics.Tracing.EventSourceOptions) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.Write(System.String,System.Diagnostics.Tracing.EventSourceOptions) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Byte[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Byte[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Byte[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Byte[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Int64,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.Int64,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Int64,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.String,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEvent(System.Int32,System.String,System.String,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventCore(System.Int32,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventCore(System.Int32,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventCore(System.Int32,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventCore(System.Int32,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventCore(System.Int32,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventVarargs(System.Int32,System.Guid*,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventVarargs(System.Int32,System.Guid*,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventVarargs(System.Int32,System.Guid*,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityId(System.Int32,System.Guid,System.Object[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityId(System.Int32,System.Guid,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityId(System.Int32,System.Guid,System.Object[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityIdCore(System.Int32,System.Guid*,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityIdCore(System.Int32,System.Guid*,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityIdCore(System.Int32,System.Guid*,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityIdCore(System.Int32,System.Guid*,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.WriteEventWithRelatedActivityIdCore(System.Int32,System.Guid*,System.Int32,System.Diagnostics.Tracing.EventSource.EventData*) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,!0) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,!0) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,!0) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,!0) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,!0) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,!0) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,System.Guid,System.Guid,!0) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,System.Guid,System.Guid,!0) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.EventSource.Write`1(System.String,System.Diagnostics.Tracing.EventSourceOptions,System.Guid,System.Guid,!0) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2112:ReflectionToRequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.EventSourceException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String,System.Boolean,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.FrameworkEventSource.WriteEvent(System.Int32,System.Int64,System.Int32,System.String,System.Boolean,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.IncrementingEventCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | 512 | +| System.Void System.Diagnostics.Tracing.IncrementingEventCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 1 | System.Diagnostics.Tracing.IncrementingCounterPayload | +| System.Void System.Diagnostics.Tracing.IncrementingEventCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.IncrementingEventCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.IncrementingPollingCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | 512 | +| System.Void System.Diagnostics.Tracing.IncrementingPollingCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 1 | System.Diagnostics.Tracing.IncrementingCounterPayload | +| System.Void System.Diagnostics.Tracing.IncrementingPollingCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.IncrementingPollingCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.NullableTypeInfo..ctor(System.Type,System.Collections.Generic.List) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.NullableTypeInfo.WriteData(System.Diagnostics.Tracing.PropertyValue) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.NullableTypeInfo.WriteData(System.Diagnostics.Tracing.PropertyValue) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2072:UnrecognizedReflectionPattern | +| System.Void System.Diagnostics.Tracing.PollingCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | 512 | +| System.Void System.Diagnostics.Tracing.PollingCounter.WritePayload(System.Single,System.Int32) | [DynamicDependencyAttribute(...)] | 1 | System.Diagnostics.Tracing.CounterPayload | +| System.Void System.Diagnostics.Tracing.PollingCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Diagnostics.Tracing.PollingCounter.WritePayload(System.Single,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Void System.Diagnostics.Tracing.TraceLoggingEventTypes..ctor(System.String,System.Diagnostics.Tracing.EventTags,System.Reflection.ParameterInfo[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.TraceLoggingEventTypes..ctor(System.String,System.Diagnostics.Tracing.EventTags,System.Type[]) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.Diagnostics.Tracing.TypeAnalysis..ctor(System.Type,System.Diagnostics.Tracing.EventDataAttribute,System.Collections.Generic.List) | [RequiresUnreferencedCodeAttribute(...)] | 0 | EventSource WriteEvent will serialize the whole object graph. Trimmer will not safely handle this case because properties may be trimmed. This can be suppressed if the object is a primitive type | +| System.Void System.DivideByZeroException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DllNotFoundException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.DuplicateWaitObjectException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.EntryPointNotFoundException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Environment.FailFast(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Environment.FailFast(System.String,System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Environment.FailFast(System.String,System.Exception,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.EventHandler.Invoke(System.Object,System.EventArgs) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.EventHandler`1.Invoke(System.Object,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Exception..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Exception.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.FieldAccessException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.FormatException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Func`5..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`6..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`7..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`8..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`9..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`10..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`11..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`12..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`13..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`14..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`15..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`16..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Func`17..ctor(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.GC.KeepAlive(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Globalization.CompareInfo.InitSort(System.Globalization.CultureInfo) | [MemberNotNullAttribute(...)] | 0 | _sortName | +| System.Void System.Globalization.CultureInfo.set_DefaultThreadCurrentCulture(System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Globalization.CultureInfo.set_DefaultThreadCurrentUICulture(System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Globalization.CultureNotFoundException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Globalization.CultureNotFoundException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Globalization.DateTimeFormatInfo.set_Calendar(System.Globalization.Calendar) | [MemberNotNullAttribute(...)] | 0 | calendar | +| System.Void System.Globalization.StringInfo.set_String(System.String) | [MemberNotNullAttribute(...)] | 0 | _str | +| System.Void System.Guid..ctor(System.Byte[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Guid..ctor(System.Int32,System.Int16,System.Int16,System.Byte[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Guid..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Guid..ctor(System.UInt32,System.UInt16,System.UInt16,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte,System.Byte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.HashCode.AddBytes(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.BinaryWriter.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.BinaryWriter.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.BinaryWriter.Write(System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.BinaryWriter.Write(System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.BinaryWriter.Write(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.BinaryWriter.Write(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.BufferedStream.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.DirectoryNotFoundException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.EndOfStreamException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.Enumeration.FileSystemEnumerable`1..ctor(System.String,System.IO.Enumeration.FileSystemEnumerable.FindTransform,System.IO.EnumerationOptions) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.Enumeration.FileSystemEnumerator`1..ctor(System.String,System.IO.EnumerationOptions) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.File.Decrypt(System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.IO.File.Encrypt(System.String) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.IO.FileInfo.Decrypt() | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.IO.FileInfo.Encrypt() | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.IO.FileLoadException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileLoadException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileNotFoundException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileNotFoundException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use FileStream(SafeFileHandle handle, FileAccess access) instead. | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess,System.Boolean) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess,System.Boolean) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use FileStream(SafeFileHandle handle, FileAccess access) and optionally make a new SafeFileHandle with ownsHandle=false if needed instead. | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess,System.Boolean,System.Int32) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess,System.Boolean,System.Int32) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use FileStream(SafeFileHandle handle, FileAccess access, int bufferSize) and optionally make a new SafeFileHandle with ownsHandle=false if needed instead. | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess,System.Boolean,System.Int32,System.Boolean) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.IO.FileStream..ctor(System.IntPtr,System.IO.FileAccess,System.Boolean,System.Int32,System.Boolean) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use FileStream(SafeFileHandle handle, FileAccess access, int bufferSize, bool isAsync) and optionally make a new SafeFileHandle with ownsHandle=false if needed instead. | +| System.Void System.IO.FileStream.Lock(System.Int64,System.Int64) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.IO.FileStream.Lock(System.Int64,System.Int64) | [UnsupportedOSPlatformAttribute(...)] | 0 | macos | +| System.Void System.IO.FileStream.Lock(System.Int64,System.Int64) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.IO.FileStream.Unlock(System.Int64,System.Int64) | [UnsupportedOSPlatformAttribute(...)] | 0 | ios | +| System.Void System.IO.FileStream.Unlock(System.Int64,System.Int64) | [UnsupportedOSPlatformAttribute(...)] | 0 | macos | +| System.Void System.IO.FileStream.Unlock(System.Int64,System.Int64) | [UnsupportedOSPlatformAttribute(...)] | 0 | tvos | +| System.Void System.IO.FileStream.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.IOException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.MemoryStream.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.PathTooLongException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.RandomAccess.Write(Microsoft.Win32.SafeHandles.SafeFileHandle,System.Collections.Generic.IReadOnlyList>,System.Int64) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.AllocateBuffer() | [MemberNotNullAttribute(...)] | 0 | _buffer | +| System.Void System.IO.Strategies.BufferedFileStreamStrategy.EnsureBufferAllocated() | [MemberNotNullAttribute(...)] | 0 | _buffer | +| System.Void System.IO.Stream.ObjectInvariant() | [ObsoleteAttribute(...)] | 0 | Do not call or override this method. | +| System.Void System.IO.Stream.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.StreamWriter.Write(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StreamWriter.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.StreamWriter.Write(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StreamWriter.Write(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StreamWriter.Write(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StreamWriter.WriteLine(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.StreamWriter.WriteLine(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StreamWriter.WriteLine(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StreamWriter.WriteLine(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StringWriter..ctor(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StringWriter.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.StringWriter.Write(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StringWriter.Write(System.Text.StringBuilder) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.StringWriter.WriteLine(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.StringWriter.WriteLine(System.Text.StringBuilder) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter..ctor(System.IFormatProvider) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.Write(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.Write(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.Write(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.TextWriter.Write(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.Write(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.Write(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.Write(System.Text.StringBuilder) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.Write(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.TextWriter.Write(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.TextWriter.WriteLine(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.WriteLine(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.WriteLine(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.IO.TextWriter.WriteLine(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.WriteLine(System.String,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.WriteLine(System.String,System.Object,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.WriteLine(System.Text.StringBuilder) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.IO.TextWriter.WriteLine(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.TextWriter.WriteLine(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryAccessor..ctor(System.Runtime.InteropServices.SafeBuffer,System.Int64,System.Int64) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.UnmanagedMemoryAccessor..ctor(System.Runtime.InteropServices.SafeBuffer,System.Int64,System.Int64,System.IO.FileAccess) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.UnmanagedMemoryAccessor.Initialize(System.Runtime.InteropServices.SafeBuffer,System.Int64,System.Int64,System.IO.FileAccess) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.UnmanagedMemoryAccessor.Write(System.Int64,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryAccessor.Write(System.Int64,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryAccessor.Write(System.Int64,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryAccessor.Write(System.Int64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryStream..ctor(System.Byte*,System.Int64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryStream..ctor(System.Byte*,System.Int64,System.Int64,System.IO.FileAccess) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryStream..ctor(System.Runtime.InteropServices.SafeBuffer,System.Int64,System.Int64) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.UnmanagedMemoryStream..ctor(System.Runtime.InteropServices.SafeBuffer,System.Int64,System.Int64,System.IO.FileAccess) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.UnmanagedMemoryStream.Initialize(System.Byte*,System.Int64,System.Int64,System.IO.FileAccess) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.IO.UnmanagedMemoryStream.Initialize(System.Runtime.InteropServices.SafeBuffer,System.Int64,System.Int64,System.IO.FileAccess) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IO.UnmanagedMemoryStream.Write(System.Byte[],System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.IntPtr..ctor(System.Void*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.InvalidCastException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.InvalidOperationException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.InvalidTimeZoneException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.MemberAccessException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.MemoryExtensions.CopyTo`1(!0[],System.Memory) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MemoryExtensions.CopyTo`1(!0[],System.Span) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MemoryExtensions.Reverse`1(System.Span) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MemoryExtensions.Sort`1(System.Span) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MemoryExtensions.Sort`1(System.Span,System.Comparison) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.MemoryExtensions.Sort`2(System.Span,System.Span) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MemoryExtensions.Sort`2(System.Span,System.Span,System.Comparison) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MemoryExtensions.Sort`3(System.Span,System.Span,!2) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MethodAccessException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.MissingFieldException..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MissingFieldException..ctor(System.String,System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MissingFieldException..ctor(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MissingMemberException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.MissingMemberException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.MissingMethodException..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MissingMethodException..ctor(System.String,System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MissingMethodException..ctor(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.MulticastDelegate..ctor(System.Object,System.String) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The target method might be removed | +| System.Void System.Net.WebUtility.HtmlDecode(System.String,System.IO.TextWriter) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Net.WebUtility.HtmlEncode(System.String,System.IO.TextWriter) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.NotFiniteNumberException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.NotFiniteNumberException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.NotImplementedException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.NotSupportedException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.NullReferenceException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Numerics.Vector2.CopyTo(System.Single[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Numerics.Vector2.CopyTo(System.Single[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Numerics.Vector3.CopyTo(System.Single[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Numerics.Vector3.CopyTo(System.Single[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Numerics.Vector4.CopyTo(System.Single[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Numerics.Vector4.CopyTo(System.Single[],System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Numerics.Vector.Widen(System.Numerics.Vector,System.Numerics.Vector,System.Numerics.Vector) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.ObjectDisposedException..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.ObjectDisposedException..ctor(System.String,System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.ObjectDisposedException..ctor(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.OperationCanceledException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.OutOfMemoryException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.OverflowException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.PlatformNotSupportedException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Random.NextBytes(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.RankException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ReadOnlySpan`1..ctor(System.Void*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.ReadOnlySpan`1..ctor(System.Void*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Reflection.Assembly.add_ModuleResolve(System.Reflection.ModuleResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Assembly.remove_ModuleResolve(System.Reflection.ModuleResolveEventHandler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.AssemblyAlgorithmIdAttribute..ctor(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Reflection.AssemblyFlagsAttribute..ctor(System.Int32) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use AssemblyFlagsAttribute(AssemblyNameFlags) instead. | +| System.Void System.Reflection.AssemblyFlagsAttribute..ctor(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Reflection.AssemblyFlagsAttribute..ctor(System.UInt32) | [ObsoleteAttribute(...)] | 0 | This constructor has been deprecated. Use AssemblyFlagsAttribute(AssemblyNameFlags) instead. | +| System.Void System.Reflection.AssemblyName..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Reflection.AssemblyName.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Reflection.CustomAttribute.AddCustomAttributes(System.RuntimeType.ListBuilder,System.Reflection.RuntimeModule,System.Int32,System.RuntimeType,System.Boolean,System.RuntimeType.ListBuilder) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Reflection.CustomAttribute.AddCustomAttributes(System.RuntimeType.ListBuilder,System.Reflection.RuntimeModule,System.Int32,System.RuntimeType,System.Boolean,System.RuntimeType.ListBuilder) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2065:UnrecognizedReflectionPattern | +| System.Void System.Reflection.CustomAttributeFormatException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Reflection.Emit.AssemblyBuilder.InitManifestModule() | [MemberNotNullAttribute(...)] | 0 | _manifestModuleBuilder | +| System.Void System.Reflection.Emit.DynamicILInfo.SetCode(System.Byte*,System.Int32,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Reflection.Emit.DynamicILInfo.SetCode(System.Byte*,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Reflection.Emit.DynamicILInfo.SetCode(System.Byte[],System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.DynamicILInfo.SetExceptions(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Reflection.Emit.DynamicILInfo.SetExceptions(System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Reflection.Emit.DynamicILInfo.SetExceptions(System.Byte[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.DynamicILInfo.SetLocalSignature(System.Byte*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Reflection.Emit.DynamicILInfo.SetLocalSignature(System.Byte*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Reflection.Emit.DynamicILInfo.SetLocalSignature(System.Byte[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.DynamicMethod.Init(System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type,System.Reflection.Module,System.Boolean,System.Boolean) | [MemberNotNullAttribute(...)] | 0 | m_dynMethod | +| System.Void System.Reflection.Emit.DynamicMethod.Init(System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type,System.Reflection.Module,System.Boolean,System.Boolean) | [MemberNotNullAttribute(...)] | 0 | m_parameterTypes | +| System.Void System.Reflection.Emit.DynamicMethod.Init(System.String,System.Reflection.MethodAttributes,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type,System.Reflection.Module,System.Boolean,System.Boolean) | [MemberNotNullAttribute(...)] | 0 | m_returnType | +| System.Void System.Reflection.Emit.EnumBuilder..ctor(System.String,System.Type,System.Reflection.TypeAttributes,System.Reflection.Emit.ModuleBuilder) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Reflection.Emit.EnumBuilder..ctor(System.String,System.Type,System.Reflection.TypeAttributes,System.Reflection.Emit.ModuleBuilder) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2064:UnrecognizedReflectionPattern | +| System.Void System.Reflection.Emit.FieldBuilder.SetConstant(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.FieldBuilder.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.GenericTypeParameterBuilder.SetBaseTypeConstraint(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.ILGenerator.Emit(System.Reflection.Emit.OpCode,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Reflection.Emit.ILGenerator.EmitCalli(System.Reflection.Emit.OpCode,System.Reflection.CallingConventions,System.Type,System.Type[],System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.ILGenerator.EmitCalli(System.Reflection.Emit.OpCode,System.Runtime.InteropServices.CallingConvention,System.Type,System.Type[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.MethodBuilder.SetReturnType(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.MethodBuilder.SetSignature(System.Type,System.Type[],System.Type[],System.Type[],System.Type[][],System.Type[][]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.ParameterBuilder.SetCustomAttribute(System.Reflection.ConstructorInfo,System.Byte[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Reflection.Emit.ParameterBuilder.SetCustomAttribute(System.Reflection.Emit.CustomAttributeBuilder) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Reflection.Emit.PropertyBuilder.SetConstant(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.PropertyBuilder.SetValue(System.Object,System.Object,System.Object[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.PropertyBuilder.SetValue(System.Object,System.Object,System.Reflection.BindingFlags,System.Reflection.Binder,System.Object[],System.Globalization.CultureInfo) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.Emit.SignatureHelper.Init(System.Reflection.Module) | [MemberNotNullAttribute(...)] | 0 | m_signature | +| System.Void System.Reflection.Emit.SignatureHelper.Init(System.Reflection.Module,System.Reflection.MdSigCallingConvention) | [MemberNotNullAttribute(...)] | 0 | m_signature | +| System.Void System.Reflection.Emit.SignatureHelper.Init(System.Reflection.Module,System.Reflection.MdSigCallingConvention,System.Int32) | [MemberNotNullAttribute(...)] | 0 | m_signature | +| System.Void System.Reflection.Emit.TypeBuilder.SetParent(System.Type) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.FieldInfo.SetValueDirect(System.TypedReference,System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Reflection.FieldInfo.SetValueDirect(System.TypedReference,System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Reflection.InvalidFilterCriteriaException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Reflection.Metadata.RuntimeTypeMetadataUpdateHandler.ClearCache(System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Reflection.Metadata.RuntimeTypeMetadataUpdateHandler.ClearCache(System.Type[]) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:RequiresUnreferencedCode | +| System.Void System.Reflection.ReflectionTypeLoadException..ctor(System.Type[],System.Exception[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.ReflectionTypeLoadException..ctor(System.Type[],System.Exception[],System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Reflection.RuntimeAssembly.AddPublicNestedTypes(System.Type,System.Collections.Generic.List,System.Collections.Generic.List) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types might be removed because recursive nested types can't currently be annotated for dynamic access. | +| System.Void System.Reflection.RuntimeCustomAttributeData..ctor(System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.Reflection.ConstArray) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Reflection.RuntimeCustomAttributeData..ctor(System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.Reflection.ConstArray) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Reflection.RuntimeCustomAttributeData..ctor(System.Reflection.RuntimeModule,System.Reflection.MetadataToken,System.Reflection.ConstArray) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Void System.Reflection.RuntimeCustomAttributeData.Init(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Reflection.RuntimeCustomAttributeData.Init(System.Object) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2075:UnrecognizedReflectionPattern | +| System.Void System.Reflection.TargetException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Resources.MissingManifestResourceException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Resources.MissingSatelliteAssemblyException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Resources.ResourceManager.CommonAssemblyInit() | [MemberNotNullAttribute(...)] | 0 | _resourceGroveler | +| System.Void System.Resources.ResourceReader..ctor(System.IO.Stream) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Resources.ResourceReader..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Resources.ResourceReader.GetResourceData(System.String,System.String,System.Byte[]) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Resources.ResourceReader.ReadResources() | [MemberNotNullAttribute(...)] | 0 | _typeNamePositions | +| System.Void System.Resources.ResourceReader.ReadResources() | [MemberNotNullAttribute(...)] | 0 | _typeTable | +| System.Void System.Resources.ResourceReader._ReadResources() | [MemberNotNullAttribute(...)] | 0 | _typeNamePositions | +| System.Void System.Resources.ResourceReader._ReadResources() | [MemberNotNullAttribute(...)] | 0 | _typeTable | +| System.Void System.Runtime.CompilerServices.AsyncIteratorStateMachineAttribute..ctor(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.AsyncStateMachineAttribute..ctor(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredTaskAwaitable.ConfiguredTaskAwaiter.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredTaskAwaitable.ConfiguredTaskAwaiter.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1.ConfiguredTaskAwaiter.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredValueTaskAwaitable.ConfiguredValueTaskAwaiter.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredValueTaskAwaitable.ConfiguredValueTaskAwaiter.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredValueTaskAwaitable`1.ConfiguredValueTaskAwaiter.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ConfiguredValueTaskAwaitable`1.ConfiguredValueTaskAwaiter.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.DecimalConstantAttribute..ctor(System.Byte,System.Byte,System.UInt32,System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.CompilerServices.DefaultInterpolatedStringHandler..ctor(System.Int32,System.Int32,System.IFormatProvider,System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.AppendFormatted`1(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.AppendFormatted`1(!0,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.DefaultInterpolatedStringHandler.AppendLiteral(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ICriticalNotifyCompletion.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.IndexerNameAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.IteratorStateMachineAttribute..ctor(System.Type) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.CleanupCode.Invoke(System.Object,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(System.Runtime.CompilerServices.RuntimeHelpers.TryCode,System.Runtime.CompilerServices.RuntimeHelpers.CleanupCode,System.Object) | [ObsoleteAttribute(...)] | 0 | The Constrained Execution Region (CER) feature is not supported. | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareConstrainedRegions() | [ObsoleteAttribute(...)] | 0 | The Constrained Execution Region (CER) feature is not supported. | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareConstrainedRegionsNoOP() | [ObsoleteAttribute(...)] | 0 | The Constrained Execution Region (CER) feature is not supported. | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareContractedDelegate(System.Delegate) | [ObsoleteAttribute(...)] | 0 | The Constrained Execution Region (CER) feature is not supported. | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.PrepareMethod(System.RuntimeMethodHandle,System.RuntimeTypeHandle[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.ProbeForSufficientStack() | [ObsoleteAttribute(...)] | 0 | The Constrained Execution Region (CER) feature is not supported. | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.RunClassConstructor(System.RuntimeTypeHandle) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Trimmer can't guarantee existence of class constructor | +| System.Void System.Runtime.CompilerServices.RuntimeHelpers.TryCode.Invoke(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.CompilerServices.StrongBox`1..ctor(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.SwitchExpressionException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.TaskAwaiter.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.TaskAwaiter.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.TaskAwaiter`1.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.TaskAwaiter`1.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ValueTaskAwaiter.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ValueTaskAwaiter.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ValueTaskAwaiter`1.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.ValueTaskAwaiter`1.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.YieldAwaitable.YieldAwaiter.OnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.CompilerServices.YieldAwaitable.YieldAwaiter.UnsafeOnCompleted(System.Action) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.COMException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.ComTypes.IBindCtx.EnumObjectParam(System.Runtime.InteropServices.ComTypes.IEnumString) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.IBindCtx.GetRunningObjectTable(System.Runtime.InteropServices.ComTypes.IRunningObjectTable) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.IConnectionPointContainer.FindConnectionPoint(System.Guid,System.Runtime.InteropServices.ComTypes.IConnectionPoint) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.IMoniker.Enum(System.Boolean,System.Runtime.InteropServices.ComTypes.IEnumMoniker) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.IMoniker.Reduce(System.Runtime.InteropServices.ComTypes.IBindCtx,System.Int32,System.Runtime.InteropServices.ComTypes.IMoniker,System.Runtime.InteropServices.ComTypes.IMoniker) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.IPersistFile.Save(System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.ITypeInfo2.GetDocumentation2(System.Int32,System.String,System.Int32,System.String) | [LCIDConversionAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.ComTypes.ITypeInfo2.GetMops(System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.ITypeInfo.GetMops(System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.ComTypes.ITypeLib2.GetDocumentation2(System.Int32,System.String,System.Int32,System.String) | [LCIDConversionAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.ComWrappers.RegisterForMarshalling(System.Runtime.InteropServices.ComWrappers) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Runtime.InteropServices.CurrencyWrapper..ctor(System.Object) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.ExternalException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.InvalidComObjectException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.InvalidOleVariantTypeException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.Marshal.ChangeWrapperHandleStrength(System.Object,System.Boolean) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Runtime.InteropServices.Marshal.DestroyStructure`1(System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.Marshal.GetNativeVariantForObject(System.Object,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.Marshal.GetNativeVariantForObject(System.Object,System.IntPtr) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Runtime.InteropServices.Marshal.GetNativeVariantForObject`1(!0,System.IntPtr) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.Marshal.GetNativeVariantForObject`1(!0,System.IntPtr) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Runtime.InteropServices.Marshal.PrelinkAll(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Runtime.InteropServices.Marshal.PrelinkAll(System.Type) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2070:UnrecognizedReflectionPattern | +| System.Void System.Runtime.InteropServices.MarshalDirectiveException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.NativeMemory.AlignedFree(System.Void*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.NativeMemory.Free(System.Void*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.ObjectiveC.ObjectiveCMarshal.SetMessageSendPendingException(System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.InteropServices.SEHException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.SafeArrayRankMismatchException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.SafeArrayTypeMismatchException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.InteropServices.SafeBuffer.AcquirePointer(System.Byte*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.Initialize(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.Initialize(System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.Initialize`1(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.ReadArray`1(System.UInt64,!0[],System.Int32,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.ReadSpan`1(System.UInt64,System.Span) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.WriteArray`1(System.UInt64,!0[],System.Int32,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.WriteSpan`1(System.UInt64,System.ReadOnlySpan) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.InteropServices.SafeBuffer.Write`1(System.UInt64,!0) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.Loader.AssemblyLoadContext..ctor(System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.Loader.AssemblyLoadContext.LoadFromPath(System.IntPtr,System.String,System.String,System.Runtime.CompilerServices.ObjectHandleOnStack) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Void System.Runtime.Loader.AssemblyLoadContext.LoadFromStream(System.IntPtr,System.IntPtr,System.Int32,System.IntPtr,System.Int32,System.Runtime.CompilerServices.ObjectHandleOnStack) | [RequiresUnreferencedCodeAttribute(...)] | 0 | Types and members the loaded assembly depends on might be removed | +| System.Void System.Runtime.Loader.AssemblyLoadContext.StartProfileOptimization(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.ProfileOptimization.SetProfileRoot(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.ProfileOptimization.StartProfile(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.Serialization.SafeSerializationEventArgs.AddSerializedState(System.Runtime.Serialization.ISafeSerializationData) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.Serialization.SerializationException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.Serialization.SerializationInfo..ctor(System.Type,System.Runtime.Serialization.IFormatterConverter) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.Serialization.SerializationInfo..ctor(System.Type,System.Runtime.Serialization.IFormatterConverter,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.Serialization.SerializationInfo.AddValue(System.String,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.Serialization.SerializationInfo.AddValue(System.String,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.Serialization.SerializationInfo.AddValue(System.String,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.Serialization.SerializationInfo.AddValue(System.String,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Runtime.Versioning.SupportedOSPlatformAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.Versioning.SupportedOSPlatformGuardAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.Versioning.TargetFrameworkAttribute.set_FrameworkDisplayName(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Runtime.Versioning.TargetPlatformAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.Versioning.UnsupportedOSPlatformAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Runtime.Versioning.UnsupportedOSPlatformGuardAttribute..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.RuntimeFieldHandle.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.RuntimeMethodHandle.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.RuntimeTypeHandle.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.Cryptography.CryptographicException..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Security.Cryptography.CryptographicException..ctor(System.String,System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Security.PermissionSet.CopyTo(System.Array,System.Int32) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.PermissionSet.FromXml(System.Security.SecurityElement) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.SecureString..ctor(System.Char*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Security.SecurityElement..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.SecurityElement..ctor(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.SecurityElement.AddAttribute(System.String,System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.SecurityElement.AddChild(System.Security.SecurityElement) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.SecurityElement.set_Tag(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.SecurityException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.SecurityException.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Security.VerificationException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Signature.GetSignature(System.Void*,System.Int32,System.RuntimeFieldHandleInternal,System.IRuntimeMethodInfo,System.RuntimeType) | [MemberNotNullAttribute(...)] | 0 | m_arguments | +| System.Void System.Signature.GetSignature(System.Void*,System.Int32,System.RuntimeFieldHandleInternal,System.IRuntimeMethodInfo,System.RuntimeType) | [MemberNotNullAttribute(...)] | 0 | m_returnTypeORfieldType | +| System.Void System.Span`1..ctor(System.Void*,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Span`1..ctor(System.Void*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.StartupHookProvider.CallStartupHook(System.StartupHookProvider.StartupHookNameOrPath) | [RequiresUnreferencedCodeAttribute(...)] | 0 | The StartupHookSupport feature switch has been enabled for this app which is being trimmed. Startup hook code is not observable by the trimmer and so required assemblies, types and members may be removed | +| System.Void System.String..ctor(System.Char*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.String..ctor(System.Char*) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.Char*) | +| System.Void System.String..ctor(System.Char*) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.String..ctor(System.Char*,System.Int32,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.String..ctor(System.Char*,System.Int32,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.Char*,System.Int32,System.Int32) | +| System.Void System.String..ctor(System.Char*,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.String..ctor(System.Char,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.Char,System.Int32) | +| System.Void System.String..ctor(System.Char[]) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.Char[]) | +| System.Void System.String..ctor(System.Char[]) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.String..ctor(System.Char[],System.Int32,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.Char[],System.Int32,System.Int32) | +| System.Void System.String..ctor(System.ReadOnlySpan) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.ReadOnlySpan{System.Char}) | +| System.Void System.String..ctor(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.String..ctor(System.SByte*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.String..ctor(System.SByte*) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.SByte*) | +| System.Void System.String..ctor(System.SByte*) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.String..ctor(System.SByte*,System.Int32,System.Int32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.String..ctor(System.SByte*,System.Int32,System.Int32) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.SByte*,System.Int32,System.Int32) | +| System.Void System.String..ctor(System.SByte*,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.String..ctor(System.SByte*,System.Int32,System.Int32,System.Text.Encoding) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.String..ctor(System.SByte*,System.Int32,System.Int32,System.Text.Encoding) | [DynamicDependencyAttribute(...)] | 0 | Ctor(System.SByte*,System.Int32,System.Int32,System.Text.Encoding) | +| System.Void System.String..ctor(System.SByte*,System.Int32,System.Int32,System.Text.Encoding) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.String.CopyTo(System.Span) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.SystemException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Text.Decoder.Convert(System.Byte*,System.Int32,System.Char*,System.Int32,System.Boolean,System.Int32,System.Int32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Text.Decoder.Convert(System.Byte[],System.Int32,System.Int32,System.Char[],System.Int32,System.Int32,System.Boolean,System.Int32,System.Int32,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Text.Decoder.set_Fallback(System.Text.DecoderFallback) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.Encoder.Convert(System.Char*,System.Int32,System.Byte*,System.Int32,System.Boolean,System.Int32,System.Int32,System.Boolean) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Text.Encoder.Convert(System.Char[],System.Int32,System.Int32,System.Byte[],System.Int32,System.Int32,System.Boolean,System.Int32,System.Int32,System.Boolean) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Text.Encoder.set_Fallback(System.Text.EncoderFallback) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.EncoderReplacementFallbackBuffer..ctor(System.Text.EncoderReplacementFallback) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Text.Encoding..ctor(System.Int32,System.Text.EncoderFallback,System.Text.DecoderFallback) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.Encoding.SetDefaultFallbacks() | [MemberNotNullAttribute(...)] | 0 | decoderFallback | +| System.Void System.Text.Encoding.SetDefaultFallbacks() | [MemberNotNullAttribute(...)] | 0 | encoderFallback | +| System.Void System.Text.Rune..ctor(System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Text.StringBuilder..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder..ctor(System.String,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder..ctor(System.String,System.Int32,System.Int32,System.Int32) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder.AppendInterpolatedStringHandler.AppendFormatted(System.Object,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder.AppendInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Text.StringBuilder.AppendInterpolatedStringHandler.AppendFormatted(System.ReadOnlySpan,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Text.StringBuilder.AppendInterpolatedStringHandler.AppendFormatted(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder.AppendInterpolatedStringHandler.AppendFormatted(System.String,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder.AppendInterpolatedStringHandler.AppendFormatted`1(!0,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder.AppendInterpolatedStringHandler.AppendFormatted`1(!0,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Text.StringBuilder.CopyTo(System.Int32,System.Span,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Text.TranscodingStream.EnsurePreReadConditions() | [MemberNotNullAttribute(...)] | 0 | [_innerDecoder,_thisEncoder,_readBuffer] | +| System.Void System.Text.TranscodingStream.EnsurePreWriteConditions() | [MemberNotNullAttribute(...)] | 0 | [_thisDecoder,_innerEncoder] | +| System.Void System.Text.UTF7Encoding..ctor() | [ObsoleteAttribute(...)] | 0 | The UTF-7 encoding is insecure and should not be used. Consider using UTF-8 instead. | +| System.Void System.Text.UTF7Encoding..ctor(System.Boolean) | [ObsoleteAttribute(...)] | 0 | The UTF-7 encoding is insecure and should not be used. Consider using UTF-8 instead. | +| System.Void System.Text.UTF7Encoding.MakeTables() | [MemberNotNullAttribute(...)] | 0 | _base64Bytes | +| System.Void System.Text.UTF7Encoding.MakeTables() | [MemberNotNullAttribute(...)] | 0 | _base64Values | +| System.Void System.Text.UTF7Encoding.MakeTables() | [MemberNotNullAttribute(...)] | 0 | _directEncode | +| System.Void System.Threading.AbandonedMutexException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.ContextCallback.Invoke(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.EventWaitHandle..ctor(System.Boolean,System.Threading.EventResetMode,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.EventWaitHandle..ctor(System.Boolean,System.Threading.EventResetMode,System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.LockRecursionException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.ManualResetEventSlim.Wait() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.ManualResetEventSlim.Wait(System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.Mutex..ctor(System.Boolean,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Mutex..ctor(System.Boolean,System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Overlapped..ctor(System.Int32,System.Int32,System.Int32,System.IAsyncResult) | [ObsoleteAttribute(...)] | 0 | This constructor is not 64-bit compatible and has been deprecated. Use the constructor that accepts an IntPtr for the event handle instead. | +| System.Void System.Threading.Overlapped.Free(System.Threading.NativeOverlapped*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Overlapped.Free(System.Threading.NativeOverlapped*) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void System.Threading.ParameterizedThreadStart.Invoke(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.PreAllocatedOverlapped..ctor(System.Threading.IOCompletionCallback,System.Object,System.Object) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.PreAllocatedOverlapped..ctor(System.Threading.IOCompletionCallback,System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Semaphore..ctor(System.Int32,System.Int32,System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Semaphore..ctor(System.Int32,System.Int32,System.String,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.SemaphoreFullException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.SemaphoreSlim.Wait() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.SemaphoreSlim.Wait(System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.SendOrPostCallback.Invoke(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.SynchronizationContext.SetSynchronizationContext(System.Threading.SynchronizationContext) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.SynchronizationLockException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.Tasks.Sources.ManualResetValueTaskSourceCore`1.OnCompleted(System.Action,System.Object,System.Int16,System.Threading.Tasks.Sources.ValueTaskSourceOnCompletedFlags) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task..ctor(System.Action,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task..ctor(System.Action,System.Object,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task..ctor(System.Action,System.Object,System.Threading.CancellationToken,System.Threading.Tasks.TaskCreationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task..ctor(System.Action,System.Object,System.Threading.Tasks.TaskCreationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task.WaitAll(System.Threading.Tasks.Task[]) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.Tasks.Task.WaitAll(System.Threading.Tasks.Task[],System.Threading.CancellationToken) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.Tasks.TaskCanceledException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.Tasks.TaskCompletionSource..ctor(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskCompletionSource..ctor(System.Object,System.Threading.Tasks.TaskCreationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskCompletionSource`1..ctor(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskCompletionSource`1..ctor(System.Object,System.Threading.Tasks.TaskCreationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskFactory..ctor(System.Threading.CancellationToken,System.Threading.Tasks.TaskCreationOptions,System.Threading.Tasks.TaskContinuationOptions,System.Threading.Tasks.TaskScheduler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskFactory..ctor(System.Threading.Tasks.TaskScheduler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskFactory`1..ctor(System.Threading.CancellationToken,System.Threading.Tasks.TaskCreationOptions,System.Threading.Tasks.TaskContinuationOptions,System.Threading.Tasks.TaskScheduler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskFactory`1..ctor(System.Threading.Tasks.TaskScheduler) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TaskSchedulerException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.Tasks.Task`1..ctor(System.Func,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task`1..ctor(System.Func,System.Object,System.Threading.CancellationToken) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task`1..ctor(System.Func,System.Object,System.Threading.CancellationToken,System.Threading.Tasks.TaskCreationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.Task`1..ctor(System.Func,System.Object,System.Threading.Tasks.TaskCreationOptions) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Tasks.TplEventSource.AwaitTaskContinuationScheduled(System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Threading.Tasks.TplEventSource.AwaitTaskContinuationScheduled(System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Threading.Tasks.TplEventSource.SetActivityId(System.Guid) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Threading.Tasks.TplEventSource.SetActivityId(System.Guid) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Threading.Tasks.TplEventSource.TaskCompleted(System.Int32,System.Int32,System.Int32,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Threading.Tasks.TplEventSource.TaskCompleted(System.Int32,System.Int32,System.Int32,System.Boolean) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Threading.Tasks.TplEventSource.TaskScheduled(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Threading.Tasks.TplEventSource.TaskScheduled(System.Int32,System.Int32,System.Int32,System.Int32,System.Int32,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Threading.Tasks.TplEventSource.TaskWaitBegin(System.Int32,System.Int32,System.Int32,System.Threading.Tasks.TplEventSource.TaskWaitBehavior,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Threading.Tasks.TplEventSource.TaskWaitBegin(System.Int32,System.Int32,System.Int32,System.Threading.Tasks.TplEventSource.TaskWaitBehavior,System.Int32) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Threading.Tasks.TplEventSource.TraceOperationBegin(System.Int32,System.String,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Threading.Tasks.TplEventSource.TraceOperationBegin(System.Int32,System.String,System.Int64) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Threading.Tasks.TplEventSource.TraceSynchronousWorkEnd(System.Threading.Tasks.CausalitySynchronousWork) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Threading.Tasks.TplEventSource.TraceSynchronousWorkEnd(System.Threading.Tasks.CausalitySynchronousWork) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2026:UnrecognizedReflectionPattern | +| System.Void System.Threading.Thread.Abort() | [ObsoleteAttribute(...)] | 0 | Thread.Abort is not supported and throws PlatformNotSupportedException. | +| System.Void System.Threading.Thread.Abort(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Thread.Abort(System.Object) | [ObsoleteAttribute(...)] | 0 | Thread.Abort is not supported and throws PlatformNotSupportedException. | +| System.Void System.Threading.Thread.ResetAbort() | [ObsoleteAttribute(...)] | 0 | Thread.Abort is not supported and throws PlatformNotSupportedException. | +| System.Void System.Threading.Thread.Resume() | [ObsoleteAttribute(...)] | 0 | Thread.Resume has been deprecated. Use other classes in System.Threading, such as Monitor, Mutex, Event, and Semaphore, to synchronize Threads or protect resources. | +| System.Void System.Threading.Thread.SetApartmentState(System.Threading.ApartmentState) | [SupportedOSPlatformAttribute(...)] | 0 | windows | +| System.Void System.Threading.Thread.SetCompressedStack(System.Threading.CompressedStack) | [ObsoleteAttribute(...)] | 0 | Code Access Security is not supported or honored by the runtime. | +| System.Void System.Threading.Thread.Start() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.Thread.Start(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Thread.Start(System.Object) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.Thread.Suspend() | [ObsoleteAttribute(...)] | 0 | Thread.Suspend has been deprecated. Use other classes in System.Threading, such as Monitor, Mutex, Event, and Semaphore, to synchronize Threads or protect resources. | +| System.Void System.Threading.Thread.UnsafeStart() | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.Thread.UnsafeStart(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Thread.UnsafeStart(System.Object) | [UnsupportedOSPlatformAttribute(...)] | 0 | browser | +| System.Void System.Threading.Thread.VolatileWrite(System.Object,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Thread.VolatileWrite(System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Thread.VolatileWrite(System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Thread.VolatileWrite(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Thread.VolatileWrite(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Thread.VolatileWrite(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Thread.set_CurrentPrincipal(System.Security.Principal.IPrincipal) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Thread.set_Name(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.ThreadExceptionEventHandler.Invoke(System.Object,System.Threading.ThreadExceptionEventArgs) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.ThreadInterruptedException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.ThreadPoolBoundHandle.FreeNativeOverlapped(System.Threading.NativeOverlapped*) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.ThreadStateException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.Timer..ctor(System.Threading.TimerCallback,System.Object,System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Timer.TimerSetup(System.Threading.TimerCallback,System.Object,System.UInt32,System.UInt32,System.Boolean) | [MemberNotNullAttribute(...)] | 0 | _timer | +| System.Void System.Threading.TimerCallback.Invoke(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.Volatile.Write(System.SByte,System.SByte) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Volatile.Write(System.UInt16,System.UInt16) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Volatile.Write(System.UInt32,System.UInt32) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Volatile.Write(System.UInt64,System.UInt64) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.Volatile.Write(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void System.Threading.WaitCallback.Invoke(System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.Threading.WaitHandleCannotBeOpenedException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Threading.WaitOrTimerCallback.Invoke(System.Object,System.Boolean) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.TimeZoneNotFoundException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TimeoutException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`1(System.Tuple,!0) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`1(System.Tuple,!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`2(System.Tuple,!0,!1) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`2(System.Tuple,!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`3(System.Tuple,!0,!1,!2) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`3(System.Tuple,!0,!1,!2) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`4(System.Tuple,!0,!1,!2,!3) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`4(System.Tuple,!0,!1,!2,!3) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`5(System.Tuple,!0,!1,!2,!3,!4) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`5(System.Tuple,!0,!1,!2,!3,!4) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`6(System.Tuple,!0,!1,!2,!3,!4,!5) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`6(System.Tuple,!0,!1,!2,!3,!4,!5) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`7(System.Tuple,!0,!1,!2,!3,!4,!5,!6) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`7(System.Tuple,!0,!1,!2,!3,!4,!5,!6) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`8(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`8(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`9(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`9(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`10(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`10(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`11(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`11(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`12(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`12(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`13(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`13(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`14(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`14(System.Tuple>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`15(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`15(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`16(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`16(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`17(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`17(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`18(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`18(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`19(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`19(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`20(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18,!19) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`20(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18,!19) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`21(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18,!19,!20) | [EditorBrowsableAttribute(...)] | 0 | 1 | +| System.Void System.TupleExtensions.Deconstruct`21(System.Tuple>>,!0,!1,!2,!3,!4,!5,!6,!7,!8,!9,!10,!11,!12,!13,!14,!15,!16,!17,!18,!19,!20) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Tuple`1..ctor(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Tuple`2..ctor(!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Type.GetEnumData(System.String[],System.Array) | [UnconditionalSuppressMessageAttribute(...)] | 0 | ReflectionAnalysis | +| System.Void System.Type.GetEnumData(System.String[],System.Array) | [UnconditionalSuppressMessageAttribute(...)] | 1 | IL2085:UnrecognizedReflectionPattern | +| System.Void System.TypeAccessException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TypeInitializationException..ctor(System.String,System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.TypeLoadException..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.TypeLoadException..ctor(System.String,System.Exception) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.TypeUnloadedException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.TypedReference.SetTypedReference(System.TypedReference,System.Object) | [NullableContextAttribute(...)] | 0 | 2 | +| System.Void System.UnauthorizedAccessException..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.UnhandledExceptionEventHandler.Invoke(System.Object,System.UnhandledExceptionEventArgs) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.UnitySerializationHolder..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.UnitySerializationHolder.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ValueTuple`1..ctor(!0) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ValueTuple`2..ctor(!0,!1) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ValueTuple`3..ctor(!0,!1,!2) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.ValueTuple`4..ctor(!0,!1,!2,!3) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.Version..ctor(System.String) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.WeakReference..ctor(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void System.WeakReference.GetObjectData(System.Runtime.Serialization.SerializationInfo,System.Runtime.Serialization.StreamingContext) | [NullableContextAttribute(...)] | 0 | 1 | +| System.Void* Internal.Runtime.CompilerServices.Unsafe.Add`1(System.Void*,System.Int32) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void* Internal.Runtime.CompilerServices.Unsafe.AsPointer`1(!0) | [NullableContextAttribute(...)] | 0 | 0 | +| System.Void* System.IntPtr.ToPointer() | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.IntPtr.op_Explicit(System.IntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.Runtime.InteropServices.NativeMemory.AlignedAlloc(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.Runtime.InteropServices.NativeMemory.AlignedRealloc(System.Void*,System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.Runtime.InteropServices.NativeMemory.Alloc(System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.Runtime.InteropServices.NativeMemory.Alloc(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.Runtime.InteropServices.NativeMemory.AllocZeroed(System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.Runtime.InteropServices.NativeMemory.AllocZeroed(System.UIntPtr,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | +| System.Void* System.Runtime.InteropServices.NativeMemory.Realloc(System.Void*,System.UIntPtr) | [CLSCompliantAttribute(...)] | 0 | False | | System.WeakReference | [NullableAttribute(...)] | 0 | 0 | | System.WeakReference | [NullableContextAttribute(...)] | 0 | 2 | | System.WeakReference | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | @@ -3544,6 +11857,7 @@ attrArgPositional | System.__Canon | [ComVisibleAttribute(...)] | 0 | True | | System.__DTString | [ObsoleteAttribute(...)] | 0 | Types with embedded references are not supported in this version of your compiler. | | System.__DTString | [ObsoleteAttribute(...)] | 1 | True | +| bool | [DoesNotReturnIfAttribute(...)] | 0 | False | | bool | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | bool System.Console.CapsLock | [SupportedOSPlatformAttribute(...)] | 0 | windows | | bool System.Console.NumberLock | [SupportedOSPlatformAttribute(...)] | 0 | windows | @@ -3564,6 +11878,8 @@ attrArgPositional | byte byte.One | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | byte byte.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | byte* System.IO.UnmanagedMemoryStream.PositionPointer | [CLSCompliantAttribute(...)] | 0 | False | +| byte[] | [NotNullWhenAttribute(...)] | 0 | True | +| byte[] | [NullableAttribute(...)] | 0 | 2 | | char | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | char char.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | char char.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | @@ -3571,6 +11887,7 @@ attrArgPositional | char char.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | char char.One | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | char char.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| char[] | [NullableAttribute(...)] | 0 | 2 | | decimal | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | decimal decimal.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | decimal decimal.MaxValue | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | @@ -3674,6 +11991,13 @@ attrArgPositional | long long.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | object | [ClassInterfaceAttribute(...)] | 0 | 1 | | object | [ComVisibleAttribute(...)] | 0 | True | +| object | [NotNullIfNotNullAttribute(...)] | 0 | address | +| object | [NotNullIfNotNullAttribute(...)] | 0 | syncLock | +| object | [NotNullIfNotNullAttribute(...)] | 0 | value | +| object | [NotNullWhenAttribute(...)] | 0 | True | +| object | [NullableAttribute(...)] | 0 | 0 | +| object | [NullableAttribute(...)] | 0 | 1 | +| object | [NullableAttribute(...)] | 0 | 2 | | object | [NullableContextAttribute(...)] | 0 | 2 | | object | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | object System.Array.Item | [NullableAttribute(...)] | 0 | 2 | @@ -3729,7 +12053,35 @@ attrArgPositional | object System.ValueTuple`6.Item | [NullableAttribute(...)] | 0 | 2 | | object System.ValueTuple`7.Item | [NullableAttribute(...)] | 0 | 2 | | object System.ValueTuple`8.Item | [NullableAttribute(...)] | 0 | 2 | +| object[] | [NullableAttribute(...)] | 0 | 2 | +| object[] | [NullableAttribute(...)] | 0 | [1,2] | +| object[] | [NullableAttribute(...)] | 0 | [2,1] | | object[] System.Collections.ArrayList.ArrayListDebugView.Items | [DebuggerBrowsableAttribute(...)] | 0 | 3 | +| out !0 | [MaybeNullWhenAttribute(...)] | 0 | False | +| out !0 | [NotNullWhenAttribute(...)] | 0 | True | +| out !0 | [NullableAttribute(...)] | 0 | 1 | +| out !1 | [MaybeNullWhenAttribute(...)] | 0 | False | +| out !1 | [NotNullWhenAttribute(...)] | 0 | True | +| out Microsoft.Win32.SafeHandles.SafeFileHandle | [NotNullWhenAttribute(...)] | 0 | True | +| out System.ArraySegment | [NullableAttribute(...)] | 0 | [0,1] | +| out System.Exception | [NotNullWhenAttribute(...)] | 0 | True | +| out System.Globalization.CompareInfo | [NotNullWhenAttribute(...)] | 0 | True | +| out System.Runtime.InteropServices.ComTypes.IMoniker | [NullableAttribute(...)] | 0 | 2 | +| out System.Threading.EventWaitHandle | [NotNullWhenAttribute(...)] | 0 | True | +| out System.Threading.EventWaitHandle | [NullableAttribute(...)] | 0 | 2 | +| out System.Threading.Mutex | [NotNullWhenAttribute(...)] | 0 | True | +| out System.Threading.Mutex | [NullableAttribute(...)] | 0 | 2 | +| out System.Threading.Semaphore | [NotNullWhenAttribute(...)] | 0 | True | +| out System.Threading.Semaphore | [NullableAttribute(...)] | 0 | 2 | +| out System.Version | [NotNullWhenAttribute(...)] | 0 | True | +| out System.Version | [NullableAttribute(...)] | 0 | 2 | +| out byte[] | [NotNullWhenAttribute(...)] | 0 | True | +| out object | [MaybeNullWhenAttribute(...)] | 0 | False | +| out object | [NotNullWhenAttribute(...)] | 0 | True | +| out object | [NullableAttribute(...)] | 0 | 2 | +| out object[] | [NullableAttribute(...)] | 0 | [1,2] | +| out string | [NotNullWhenAttribute(...)] | 0 | True | +| out string | [NullableAttribute(...)] | 0 | 2 | | sbyte | [CLSCompliantAttribute(...)] | 0 | False | | sbyte | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | sbyte sbyte.AdditiveIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | @@ -3747,8 +12099,14 @@ attrArgPositional | short short.NegativeOne | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | short short.One | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | short short.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| string | [CallerArgumentExpressionAttribute(...)] | 0 | argument | | string | [DefaultMemberAttribute(...)] | 0 | Chars | +| string | [DynamicallyAccessedMembersAttribute(...)] | 0 | -1 | +| string | [NotNullWhenAttribute(...)] | 0 | False | +| string | [NotNullWhenAttribute(...)] | 0 | True | | string | [NullableAttribute(...)] | 0 | 0 | +| string | [NullableAttribute(...)] | 0 | 1 | +| string | [NullableAttribute(...)] | 0 | 2 | | string | [NullableContextAttribute(...)] | 0 | 1 | | string | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | string System.AppContext.BaseDirectory | [NullableAttribute(...)] | 0 | 1 | @@ -3827,6 +12185,11 @@ attrArgPositional | string System.Type.AssemblyQualifiedName | [NullableAttribute(...)] | 0 | 2 | | string System.Type.FullName | [NullableAttribute(...)] | 0 | 2 | | string System.Type.Namespace | [NullableAttribute(...)] | 0 | 2 | +| string[] | [NotNullWhenAttribute(...)] | 0 | True | +| string[] | [NullableAttribute(...)] | 0 | 1 | +| string[] | [NullableAttribute(...)] | 0 | 2 | +| string[] | [NullableAttribute(...)] | 0 | [1,2] | +| string[] | [NullableAttribute(...)] | 0 | [2,1] | | uint | [CLSCompliantAttribute(...)] | 0 | False | | uint | [TypeForwardedFromAttribute(...)] | 0 | mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 | | uint System.Reflection.AssemblyAlgorithmIdAttribute.AlgorithmId | [CLSCompliantAttribute(...)] | 0 | False | @@ -3855,4 +12218,5 @@ attrArgPositional | ushort ushort.MultiplicativeIdentity | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | ushort ushort.One | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | | ushort ushort.Zero | [RequiresPreviewFeaturesAttribute(...)] | 0 | Generic Math is in preview. | +| void* | [NullableAttribute(...)] | 0 | 0 | | void* System.Buffers.MemoryHandle.Pointer | [CLSCompliantAttribute(...)] | 0 | False | diff --git a/csharp/ql/test/library-tests/cil/attributes/attribute.ql b/csharp/ql/test/library-tests/cil/attributes/attribute.ql index 066bb26d9b7..c363dbe0fce 100644 --- a/csharp/ql/test/library-tests/cil/attributes/attribute.ql +++ b/csharp/ql/test/library-tests/cil/attributes/attribute.ql @@ -6,7 +6,8 @@ private predicate isOsSpecific(Declaration d) { .matches("%" + [ "libobjc", "libproc", "System.Diagnostics.Tracing.XplatEventLogger", - "System.Threading.AutoreleasePool" + "System.Threading.AutoreleasePool", + "System.Diagnostics.Tracing.EventSource." ] + "%") } diff --git a/csharp/ql/test/library-tests/cil/typeAnnotations/typeAnnotations.expected b/csharp/ql/test/library-tests/cil/typeAnnotations/typeAnnotations.expected index 26409836c35..7a307016c17 100644 --- a/csharp/ql/test/library-tests/cil/typeAnnotations/typeAnnotations.expected +++ b/csharp/ql/test/library-tests/cil/typeAnnotations/typeAnnotations.expected @@ -472,6 +472,12 @@ | Parameter 0 of System.Collections.Generic.GenericArraySortHelper.LessThan | parameter | 32 | | Parameter 0 of System.Collections.Generic.GenericArraySortHelper.Swap | parameter | 32 | | Parameter 0 of System.Collections.Generic.GenericArraySortHelper.SwapIfGreater | parameter | 32 | +| Parameter 0 of System.Collections.Generic.GenericArraySortHelper.GreaterThan | parameter | 32 | +| Parameter 0 of System.Collections.Generic.GenericArraySortHelper.LessThan | parameter | 32 | +| Parameter 0 of System.Collections.Generic.GenericArraySortHelper.GreaterThan | parameter | 32 | +| Parameter 0 of System.Collections.Generic.GenericArraySortHelper.LessThan | parameter | 32 | +| Parameter 0 of System.Collections.Generic.GenericArraySortHelper.Swap | parameter | 32 | +| Parameter 0 of System.Collections.Generic.GenericArraySortHelper.SwapIfGreater | parameter | 32 | | Parameter 0 of System.ConsolePal.g__IncrementX\|113_1 | parameter | 32 | | Parameter 0 of System.ConsolePal.g__IncrementY\|113_0 | parameter | 32 | | Parameter 0 of System.ConsolePal.GetWindowSize | parameter | 32 | @@ -661,6 +667,10 @@ | Parameter 0 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 0 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 0 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.GetStateMachineBox | parameter | 32 | +| Parameter 0 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 0 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.GetStateMachineBox | parameter | 32 | +| Parameter 0 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 0 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 0 of System.Runtime.CompilerServices.CastHelpers.Element | parameter | 32 | | Parameter 0 of System.Runtime.CompilerServices.CastHelpers.HashShift | parameter | 32 | | Parameter 0 of System.Runtime.CompilerServices.CastHelpers.KeyToBucket | parameter | 32 | @@ -672,6 +682,9 @@ | Parameter 0 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 0 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 0 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.GetStateMachineBox | parameter | 32 | +| Parameter 0 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 0 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.GetStateMachineBox | parameter | 32 | +| Parameter 0 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 0 of System.Runtime.InteropServices.ComWrappers.GetIUnknownImpl | parameter | 32 | | Parameter 0 of System.Runtime.InteropServices.ComWrappers.GetIUnknownImplInternal | parameter | 32 | | Parameter 0 of System.Runtime.InteropServices.MemoryMarshal.CreateReadOnlySpan | parameter | 32 | @@ -737,6 +750,7 @@ | Parameter 0 of System.Threading.Thread.VolatileRead | parameter | 32 | | Parameter 0 of System.Threading.Thread.VolatileWrite | parameter | 32 | | Parameter 0 of System.Threading.ThreadLocal.GrowTable | parameter | 32 | +| Parameter 0 of System.Threading.ThreadLocal.GrowTable | parameter | 32 | | Parameter 0 of System.Threading.ThreadPool.GetAvailableThreads | parameter | 32 | | Parameter 0 of System.Threading.ThreadPool.GetAvailableThreadsNative | parameter | 32 | | Parameter 0 of System.Threading.ThreadPool.GetMaxThreads | parameter | 32 | @@ -789,6 +803,7 @@ | Parameter 1 of System.Buffers.Binary.BinaryPrimitives.TryReadUInt64BigEndian | parameter | 32 | | Parameter 1 of System.Buffers.Binary.BinaryPrimitives.TryReadUInt64LittleEndian | parameter | 32 | | Parameter 1 of System.Buffers.MemoryManager.TryGetArray | parameter | 32 | +| Parameter 1 of System.Buffers.MemoryManager.TryGetArray | parameter | 32 | | Parameter 1 of System.Buffers.StandardFormat.ParseHelper | parameter | 32 | | Parameter 1 of System.Buffers.StandardFormat.TryParse | parameter | 32 | | Parameter 1 of System.Buffers.Text.FormattingHelpers.CountDecimalTrailingZeros | parameter | 32 | @@ -835,20 +850,36 @@ | Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.TryDequeueSlow | parameter | 32 | | Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.TryPeek | parameter | 32 | | Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.TryTake | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.SnapForObservation | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.TryDequeue | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.TryDequeueSlow | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.TryPeek | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.ConcurrentQueue.TryDequeue | parameter | 32 | | Parameter 1 of System.Collections.Concurrent.ConcurrentQueueSegment.TryDequeue | parameter | 32 | | Parameter 1 of System.Collections.Concurrent.ConcurrentQueueSegment.TryPeek | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.ConcurrentQueueSegment.TryDequeue | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.ConcurrentQueueSegment.TryPeek | parameter | 32 | | Parameter 1 of System.Collections.Concurrent.IProducerConsumerCollection.TryTake | parameter | 32 | +| Parameter 1 of System.Collections.Concurrent.IProducerConsumerCollection.TryTake | parameter | 32 | | Parameter 1 of System.Collections.DictionaryEntry.Deconstruct | parameter | 32 | | Parameter 1 of System.Collections.Generic.EnumerableHelpers.ToArray | parameter | 32 | | Parameter 1 of System.Collections.Generic.GenericArraySortHelper.GreaterThan | parameter | 32 | | Parameter 1 of System.Collections.Generic.GenericArraySortHelper.LessThan | parameter | 32 | | Parameter 1 of System.Collections.Generic.GenericArraySortHelper.Swap | parameter | 32 | | Parameter 1 of System.Collections.Generic.GenericArraySortHelper.SwapIfGreater | parameter | 32 | +| Parameter 1 of System.Collections.Generic.GenericArraySortHelper.GreaterThan | parameter | 32 | +| Parameter 1 of System.Collections.Generic.GenericArraySortHelper.LessThan | parameter | 32 | +| Parameter 1 of System.Collections.Generic.GenericArraySortHelper.GreaterThan | parameter | 32 | +| Parameter 1 of System.Collections.Generic.GenericArraySortHelper.LessThan | parameter | 32 | +| Parameter 1 of System.Collections.Generic.GenericArraySortHelper.Swap | parameter | 32 | +| Parameter 1 of System.Collections.Generic.GenericArraySortHelper.SwapIfGreater | parameter | 32 | | Parameter 1 of System.Collections.Generic.KeyValuePair.Deconstruct | parameter | 32 | +| Parameter 1 of System.Collections.Generic.KeyValuePair.Deconstruct | parameter | 32 | | Parameter 1 of System.Collections.Generic.Queue.MoveNext | parameter | 32 | | Parameter 1 of System.Collections.Generic.Queue.TryDequeue | parameter | 32 | | Parameter 1 of System.Collections.Generic.Queue.TryPeek | parameter | 32 | -| Parameter 1 of System.Collections.Generic.Stack.TryPop | parameter | 32 | +| Parameter 1 of System.Collections.Generic.Queue.MoveNext | parameter | 32 | +| Parameter 1 of System.Collections.Generic.Stack.TryPop | parameter | 32 | | Parameter 1 of System.ConsolePal.GetWindowSize | parameter | 32 | | Parameter 1 of System.ConsolePal.TryGetCachedCursorPosition | parameter | 32 | | Parameter 1 of System.ConsolePal.TryGetCursorPosition | parameter | 32 | @@ -974,6 +1005,21 @@ | Parameter 1 of System.Half.TryParse | parameter | 32 | | Parameter 1 of System.HashCode.Initialize | parameter | 32 | | Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | +| Parameter 1 of System.INumber.TryCreate | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.DelegateEnumerator.ShouldIncludeEntry | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.DelegateEnumerator.ShouldRecurseIntoEntry | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.DelegateEnumerator.TransformEntry | parameter | 32 | @@ -983,6 +1029,8 @@ | Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.FindTransform.BeginInvoke | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.FindTransform.EndInvoke | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.FindTransform.Invoke | parameter | 32 | +| Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.FindPredicate.Invoke | parameter | 32 | +| Parameter 1 of System.IO.Enumeration.FileSystemEnumerable.FindTransform.Invoke | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerableFactory.<>c.b__7_0 | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerableFactory.<>c.b__6_0 | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerableFactory.<>c.b__8_0 | parameter | 32 | @@ -999,6 +1047,9 @@ | Parameter 1 of System.IO.Enumeration.FileSystemEnumerator.ShouldIncludeEntry | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerator.ShouldRecurseIntoEntry | parameter | 32 | | Parameter 1 of System.IO.Enumeration.FileSystemEnumerator.TransformEntry | parameter | 32 | +| Parameter 1 of System.IO.Enumeration.FileSystemEnumerator.ShouldIncludeEntry | parameter | 32 | +| Parameter 1 of System.IO.Enumeration.FileSystemEnumerator.ShouldRecurseIntoEntry | parameter | 32 | +| Parameter 1 of System.IO.Enumeration.FileSystemEnumerator.TransformEntry | parameter | 32 | | Parameter 1 of System.IO.FileSystem.DirectoryExists | parameter | 32 | | Parameter 1 of System.IO.FileSystem.FileExists | parameter | 32 | | Parameter 1 of System.IO.FileSystemInfo.Init | parameter | 32 | @@ -1073,7 +1124,14 @@ | Parameter 1 of System.OrdinalComparer.IsWellKnownOrdinalComparerCore | parameter | 32 | | Parameter 1 of System.ParseNumbers.EatWhiteSpace | parameter | 32 | | Parameter 1 of System.ReadOnlyMemory.GetObjectStartLength | parameter | 32 | +| Parameter 1 of System.ReadOnlyMemory.GetObjectStartLength | parameter | 32 | +| Parameter 1 of System.ReadOnlyMemory.GetObjectStartLength | parameter | 32 | | Parameter 1 of System.ReadOnlySpan..ctor | parameter | 32 | +| Parameter 1 of System.ReadOnlySpan..ctor | parameter | 32 | +| Parameter 1 of System.ReadOnlySpan..ctor | parameter | 32 | +| Parameter 1 of System.ReadOnlySpan..ctor | parameter | 32 | +| Parameter 1 of System.ReadOnlySpan..ctor | parameter | 32 | +| Parameter 1 of System.ReadOnlySpan..ctor | parameter | 32 | | Parameter 1 of System.Reflection.Binder.ReorderArgumentArray | parameter | 32 | | Parameter 1 of System.Reflection.CustomAttribute.FilterCustomAttributeRecord | parameter | 32 | | Parameter 1 of System.Reflection.CustomAttribute.GetPropertyOrFieldData | parameter | 32 | @@ -1107,9 +1165,27 @@ | Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.SetException | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.SetNotificationForWaitCompletion | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.GetStateMachineBox | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.SetException | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.SetNotificationForWaitCompletion | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.SetException | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.SetNotificationForWaitCompletion | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.Start | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncVoidMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncVoidMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.AsyncVoidMethodBuilder.Start | parameter | 32 | @@ -1120,6 +1196,13 @@ | Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.GetStateMachineBox | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.SetException | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.GetStateMachineBox | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.SetException | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.Start | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 1 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.SetException | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.QCallAssembly..ctor | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.QCallModule..ctor | parameter | 32 | | Parameter 1 of System.Runtime.CompilerServices.QCallTypeHandle..ctor | parameter | 32 | @@ -1195,6 +1278,8 @@ | Parameter 1 of System.RuntimeType.RuntimeTypeCache.GetMemberList | parameter | 32 | | Parameter 1 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.AddSpecialInterface | parameter | 32 | | Parameter 1 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.Insert | parameter | 32 | +| Parameter 1 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.AddSpecialInterface | parameter | 32 | +| Parameter 1 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.Insert | parameter | 32 | | Parameter 1 of System.RuntimeType.SplitName | parameter | 32 | | Parameter 1 of System.RuntimeTypeHandle.CopyRuntimeTypeHandles | parameter | 32 | | Parameter 1 of System.RuntimeTypeHandle.GetActivationInfo | parameter | 32 | @@ -1204,6 +1289,13 @@ | Parameter 1 of System.Single.TryCreate | parameter | 32 | | Parameter 1 of System.Single.TryParse | parameter | 32 | | Parameter 1 of System.Span..ctor | parameter | 32 | +| Parameter 1 of System.Span..ctor | parameter | 32 | +| Parameter 1 of System.Span..ctor | parameter | 32 | +| Parameter 1 of System.Span..ctor | parameter | 32 | +| Parameter 1 of System.Span..ctor | parameter | 32 | +| Parameter 1 of System.Span..ctor | parameter | 32 | +| Parameter 1 of System.Span..ctor | parameter | 32 | +| Parameter 1 of System.Span..ctor | parameter | 32 | | Parameter 1 of System.SpanHelpers.SequenceEqual | parameter | 32 | | Parameter 1 of System.String.Create | parameter | 32 | | Parameter 1 of System.String.IndexOfNewlineChar | parameter | 32 | @@ -1260,9 +1352,13 @@ | Parameter 1 of System.Threading.SpinLock.Enter | parameter | 32 | | Parameter 1 of System.Threading.SpinLock.TryEnter | parameter | 32 | | Parameter 1 of System.Threading.Tasks.IProducerConsumerQueue.TryDequeue | parameter | 32 | +| Parameter 1 of System.Threading.Tasks.IProducerConsumerQueue.TryDequeue | parameter | 32 | +| Parameter 1 of System.Threading.Tasks.IProducerConsumerQueue.TryDequeue | parameter | 32 | | Parameter 1 of System.Threading.Tasks.MultiProducerMultiConsumerQueue.TryDequeue | parameter | 32 | | Parameter 1 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeue | parameter | 32 | | Parameter 1 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeueSlow | parameter | 32 | +| Parameter 1 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeue | parameter | 32 | +| Parameter 1 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeueSlow | parameter | 32 | | Parameter 1 of System.Threading.Tasks.Task.AddToList | parameter | 32 | | Parameter 1 of System.Threading.Tasks.Task.CreationOptionsFromContinuationOptions | parameter | 32 | | Parameter 1 of System.Threading.Tasks.Task.ExecuteWithThreadLocal | parameter | 32 | @@ -1310,6 +1406,9 @@ | Parameter 1 of System.UIntPtr.TryParse | parameter | 32 | | Parameter 1 of System.Version.TryParse | parameter | 32 | | Parameter 1 of System.WeakReference.TryGetTarget | parameter | 32 | +| Parameter 1 of System.WeakReference.TryGetTarget | parameter | 32 | +| Parameter 1 of System.WeakReference.TryGetTarget | parameter | 32 | +| Parameter 1 of System.WeakReference.TryGetTarget | parameter | 32 | | Parameter 1 of System.__DTString.GetRegularToken | parameter | 32 | | Parameter 2 of Internal.Runtime.InteropServices.IClassFactory.CreateInstance | parameter | 32 | | Parameter 2 of Interop.Globalization.GetJapaneseEraStartDate | parameter | 32 | @@ -1370,15 +1469,49 @@ | Parameter 2 of System.Char.TryFormat | parameter | 32 | | Parameter 2 of System.Char.TryParse | parameter | 32 | | Parameter 2 of System.Collections.Concurrent.ConcurrentQueue.SnapForObservation | parameter | 32 | +| Parameter 2 of System.Collections.Concurrent.ConcurrentQueue.SnapForObservation | parameter | 32 | | Parameter 2 of System.Collections.DictionaryEntry.Deconstruct | parameter | 32 | | Parameter 2 of System.Collections.Generic.Dictionary.CollectionsMarshalHelper.GetValueRefOrAddDefault | parameter | 32 | | Parameter 2 of System.Collections.Generic.Dictionary.Remove | parameter | 32 | | Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.CollectionsMarshalHelper.GetValueRefOrAddDefault | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary>.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary,ConsoleKeyInfo>.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary>.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary>.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.Dictionary.TryGetValue | parameter | 32 | | Parameter 2 of System.Collections.Generic.HashSet.AddIfNotPresent | parameter | 32 | | Parameter 2 of System.Collections.Generic.HashSet.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.HashSet.AddIfNotPresent | parameter | 32 | | Parameter 2 of System.Collections.Generic.IDictionary.TryGetValue | parameter | 32 | +| Parameter 2 of System.Collections.Generic.IDictionary.TryGetValue | parameter | 32 | | Parameter 2 of System.Collections.Generic.IReadOnlyDictionary.TryGetValue | parameter | 32 | | Parameter 2 of System.Collections.Generic.KeyValuePair.Deconstruct | parameter | 32 | +| Parameter 2 of System.Collections.Generic.KeyValuePair.Deconstruct | parameter | 32 | | Parameter 2 of System.ComponentModel.DefaultValueAttribute.ctor>g__TryConvertFromInvariantString\|2_0 | parameter | 32 | | Parameter 2 of System.ConsolePal.g__BufferUntil\|83_1 | parameter | 32 | | Parameter 2 of System.Convert.CopyToTempBufferWithoutWhiteSpace | parameter | 32 | @@ -1509,8 +1642,50 @@ | Parameter 2 of System.IO.UnmanagedMemoryAccessor.Read | parameter | 32 | | Parameter 2 of System.IO.UnmanagedMemoryAccessor.Write | parameter | 32 | | Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | +| Parameter 2 of System.IParseable.TryParse | parameter | 32 | | Parameter 2 of System.ISpanFormattable.TryFormat | parameter | 32 | | Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | +| Parameter 2 of System.ISpanParseable.TryParse | parameter | 32 | | Parameter 2 of System.Int16.TryFormat | parameter | 32 | | Parameter 2 of System.Int16.TryParse | parameter | 32 | | Parameter 2 of System.Int32.TryFormat | parameter | 32 | @@ -1550,6 +1725,8 @@ | Parameter 2 of System.ParseNumbers.GrabLongs | parameter | 32 | | Parameter 2 of System.ParseNumbers.IsDigit | parameter | 32 | | Parameter 2 of System.ReadOnlyMemory.GetObjectStartLength | parameter | 32 | +| Parameter 2 of System.ReadOnlyMemory.GetObjectStartLength | parameter | 32 | +| Parameter 2 of System.ReadOnlyMemory.GetObjectStartLength | parameter | 32 | | Parameter 2 of System.Reflection.AssemblyName.EscapeAsciiChar | parameter | 32 | | Parameter 2 of System.Reflection.CustomAttribute.AttributeUsageCheck | parameter | 32 | | Parameter 2 of System.Reflection.CustomAttribute.ParseAttributeUsageAttribute | parameter | 32 | @@ -1610,18 +1787,35 @@ | Parameter 2 of System.Runtime.CompilerServices.AsyncIteratorMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.AsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.AsyncVoidMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.AsyncVoidMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.FindEntry | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.TryGetEntry | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.TryGetValueWorker | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.TryGetValue | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.FindEntry | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.TryGetEntry | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.TryGetValueWorker | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.TryGetValue | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.TryGetValue | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.ConditionalWeakTable.TryGetValue | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.ICastable.IsInstanceOfInterface | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.ICastableHelpers.IsInstanceOfInterface | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitUnsafeOnCompleted | parameter | 32 | +| Parameter 2 of System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder.AwaitOnCompleted | parameter | 32 | | Parameter 2 of System.Runtime.InteropServices.CollectionsMarshal.GetValueRefOrAddDefault | parameter | 32 | | Parameter 2 of System.Runtime.InteropServices.ComTypes.IBindCtx.GetObjectParam | parameter | 32 | | Parameter 2 of System.Runtime.InteropServices.ComTypes.IConnectionPoint.Advise | parameter | 32 | @@ -1724,6 +1918,7 @@ | Parameter 2 of System.Text.UTF8Encoding.DecodeFirstRune | parameter | 32 | | Parameter 2 of System.Text.UTF8Encoding.TryGetByteCount | parameter | 32 | | Parameter 2 of System.Text.Unicode.TextSegmentationUtility.DecodeFirstRune.Invoke | parameter | 32 | +| Parameter 2 of System.Text.Unicode.TextSegmentationUtility.DecodeFirstRune.Invoke | parameter | 32 | | Parameter 2 of System.Text.Unicode.Utf8.FromUtf16 | parameter | 32 | | Parameter 2 of System.Text.Unicode.Utf8.ToUtf16 | parameter | 32 | | Parameter 2 of System.Text.Unicode.Utf8Utility.GetPointerToFirstInvalidByte | parameter | 32 | @@ -1748,6 +1943,8 @@ | Parameter 2 of System.Threading.SpinLock.TryEnter | parameter | 32 | | Parameter 2 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.EnqueueSlow | parameter | 32 | | Parameter 2 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeueSlow | parameter | 32 | +| Parameter 2 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.EnqueueSlow | parameter | 32 | +| Parameter 2 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeueSlow | parameter | 32 | | Parameter 2 of System.Threading.Tasks.Task.CreationOptionsFromContinuationOptions | parameter | 32 | | Parameter 2 of System.Threading.ThreadPool.GetNextConfigUInt32Value | parameter | 32 | | Parameter 2 of System.Threading.ThreadPoolWorkQueue.Dequeue | parameter | 32 | @@ -1810,6 +2007,7 @@ | Parameter 3 of System.Byte.TryParse | parameter | 32 | | Parameter 3 of System.Char.TryParse | parameter | 32 | | Parameter 3 of System.Collections.Concurrent.ConcurrentQueue.SnapForObservation | parameter | 32 | +| Parameter 3 of System.Collections.Concurrent.ConcurrentQueue.SnapForObservation | parameter | 32 | | Parameter 3 of System.Collections.Hashtable.InitHash | parameter | 32 | | Parameter 3 of System.ConsolePal.g__AppendToStdInReaderUntil\|83_2 | parameter | 32 | | Parameter 3 of System.ConsolePal.g__BufferUntil\|83_1 | parameter | 32 | @@ -1868,6 +2066,21 @@ | Parameter 3 of System.Half.TryParse | parameter | 32 | | Parameter 3 of System.HashCode.Initialize | parameter | 32 | | Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | +| Parameter 3 of System.INumber.TryParse | parameter | 32 | | Parameter 3 of System.IO.BufferedStream.WriteToBuffer | parameter | 32 | | Parameter 3 of System.IO.Path.TryJoin | parameter | 32 | | Parameter 3 of System.IO.StdInReader.GetKeyFromCharValue | parameter | 32 | @@ -1947,6 +2160,7 @@ | Parameter 3 of System.Resources.ResourceReader.GetResourceData | parameter | 32 | | Parameter 3 of System.Resources.RuntimeResourceSet.ReadValue | parameter | 32 | | Parameter 3 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.TryGetEntry | parameter | 32 | +| Parameter 3 of System.Runtime.CompilerServices.ConditionalWeakTable.Container.TryGetEntry | parameter | 32 | | Parameter 3 of System.Runtime.InteropServices.ComTypes.IMoniker.BindToObject | parameter | 32 | | Parameter 3 of System.Runtime.InteropServices.ComTypes.IMoniker.BindToStorage | parameter | 32 | | Parameter 3 of System.Runtime.InteropServices.ComTypes.IMoniker.ComposeWith | parameter | 32 | @@ -1981,6 +2195,8 @@ | Parameter 3 of System.RuntimeType.GetType | parameter | 32 | | Parameter 3 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateLiteralFields | parameter | 32 | | Parameter 3 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateRtFields | parameter | 32 | +| Parameter 3 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateLiteralFields | parameter | 32 | +| Parameter 3 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateRtFields | parameter | 32 | | Parameter 3 of System.RuntimeTypeHandle.GetActivationInfo | parameter | 32 | | Parameter 3 of System.RuntimeTypeHandle.GetTypeByName | parameter | 32 | | Parameter 3 of System.SByte.TryParse | parameter | 32 | @@ -2005,6 +2221,7 @@ | Parameter 3 of System.Text.UTF8Encoding.DecodeFirstRune | parameter | 32 | | Parameter 3 of System.Text.UTF8Encoding.EncodeRune | parameter | 32 | | Parameter 3 of System.Text.Unicode.TextSegmentationUtility.DecodeFirstRune.Invoke | parameter | 32 | +| Parameter 3 of System.Text.Unicode.TextSegmentationUtility.DecodeFirstRune.Invoke | parameter | 32 | | Parameter 3 of System.Text.Unicode.Utf8.FromUtf16 | parameter | 32 | | Parameter 3 of System.Text.Unicode.Utf8.ToUtf16 | parameter | 32 | | Parameter 3 of System.Text.Unicode.Utf8Utility.GetPointerToFirstInvalidByte | parameter | 32 | @@ -2015,6 +2232,7 @@ | Parameter 3 of System.Threading.SpinLock.ContinueTryEnterWithThreadTracking | parameter | 32 | | Parameter 3 of System.Threading.Tasks.AwaitTaskContinuation.RunCallback | parameter | 32 | | Parameter 3 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeueSlow | parameter | 32 | +| Parameter 3 of System.Threading.Tasks.SingleProducerSingleConsumerQueue.TryDequeueSlow | parameter | 32 | | Parameter 3 of System.Threading.Tasks.Task.AtomicStateUpdate | parameter | 32 | | Parameter 3 of System.Threading.ThreadPool.GetNextConfigUInt32Value | parameter | 32 | | Parameter 3 of System.TimeOnly.TryParse | parameter | 32 | @@ -2052,6 +2270,7 @@ | Parameter 4 of System.Buffers.Text.Utf8Parser.TryParseAsSpecialFloatingPoint | parameter | 32 | | Parameter 4 of System.Buffers.Text.Utf8Parser.TryParseNumber | parameter | 32 | | Parameter 4 of System.Collections.Concurrent.ConcurrentQueue.SnapForObservation | parameter | 32 | +| Parameter 4 of System.Collections.Concurrent.ConcurrentQueue.SnapForObservation | parameter | 32 | | Parameter 4 of System.Collections.Hashtable.InitHash | parameter | 32 | | Parameter 4 of System.ConsolePal.g__AppendToStdInReaderUntil\|83_2 | parameter | 32 | | Parameter 4 of System.ConsolePal.g__BufferUntil\|83_1 | parameter | 32 | @@ -2163,6 +2382,7 @@ | Parameter 4 of System.RuntimeFieldHandle.GetValue | parameter | 32 | | Parameter 4 of System.RuntimeType.FilterHelper | parameter | 32 | | Parameter 4 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateEvents | parameter | 32 | +| Parameter 4 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateEvents | parameter | 32 | | Parameter 4 of System.RuntimeTypeHandle.GetActivationInfo | parameter | 32 | | Parameter 4 of System.TermInfo.ParameterizedStrings.EvaluateInternal | parameter | 32 | | Parameter 4 of System.Text.ASCIIEncoding.GetByteCountFast | parameter | 32 | @@ -2228,6 +2448,8 @@ | Parameter 5 of System.RuntimeType.FilterHelper | parameter | 32 | | Parameter 5 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateProperties | parameter | 32 | | Parameter 5 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateRtFields | parameter | 32 | +| Parameter 5 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateProperties | parameter | 32 | +| Parameter 5 of System.RuntimeType.RuntimeTypeCache.MemberInfoCache.PopulateRtFields | parameter | 32 | | Parameter 5 of System.TermInfo.ParameterizedStrings.EvaluateInternal | parameter | 32 | | Parameter 5 of System.Text.ASCIIEncoding.GetBytesFast | parameter | 32 | | Parameter 5 of System.Text.ASCIIEncoding.GetCharsFast | parameter | 32 | @@ -2336,10 +2558,16 @@ | Parameter 21 of System.TupleExtensions.Deconstruct | parameter | 32 | | System.ByReference.Value | property | 32 | | System.ByReference.get_Value | method | 32 | +| System.ByReference.get_Value | method | 32 | +| System.ByReference.get_Value | method | 32 | | System.Collections.Generic.Dictionary.CollectionsMarshalHelper.GetValueRefOrAddDefault | method | 32 | | System.Collections.Generic.Dictionary.FindValue | method | 32 | | System.Collections.Generic.Dictionary.GetBucket | method | 32 | +| System.Collections.Generic.Dictionary.CollectionsMarshalHelper.GetValueRefOrAddDefault | method | 32 | +| System.Collections.Generic.Dictionary.FindValue | method | 32 | +| System.Collections.Generic.Dictionary.GetBucket | method | 32 | | System.Collections.Generic.HashSet.GetBucketRef | method | 32 | +| System.Collections.Generic.HashSet.GetBucketRef | method | 32 | | System.Decimal.AsMutable | method | 32 | | System.Decimal.Max | method | 32 | | System.Decimal.Min | method | 32 | @@ -2350,6 +2578,16 @@ | System.ReadOnlySpan.GetPinnableReference | method | 32 | | System.ReadOnlySpan.Item | property | 32 | | System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.GetPinnableReference | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | +| System.ReadOnlySpan.get_Item | method | 32 | | System.Runtime.CompilerServices.CastHelpers.Element | method | 32 | | System.Runtime.CompilerServices.CastHelpers.LdelemaRef | method | 32 | | System.Runtime.CompilerServices.CastHelpers.TableData | method | 32 | @@ -2371,6 +2609,19 @@ | System.Span.GetPinnableReference | method | 32 | | System.Span.Item | property | 32 | | System.Span.get_Item | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.GetPinnableReference | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.GetPinnableReference | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.GetPinnableReference | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.get_Item | method | 32 | +| System.Span.get_Item | method | 32 | | System.SpanHelpers.Add | method | 32 | | System.String.GetPinnableReference | method | 32 | | System.String.GetRawStringData | method | 32 | diff --git a/csharp/ql/test/library-tests/csharp11/GenericAttribute.cs b/csharp/ql/test/library-tests/csharp11/GenericAttribute.cs new file mode 100644 index 00000000000..bef31b9f679 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/GenericAttribute.cs @@ -0,0 +1,23 @@ +using System; + +[assembly: MyGenericAttribute()] +[module: MyGeneric2()] + +public class MyGenericAttribute : Attribute { } +public class MyGeneric2Attribute : Attribute { } + +public class TestGenericAttribute +{ + + [MyGenericAttribute()] + public void M1() { } + + [MyGeneric()] + public void M2() { } + + [MyGeneric2()] + public void M3() { } + + [return: MyGeneric()] + public int M4() { return 0; } +} \ No newline at end of file diff --git a/csharp/ql/test/library-tests/csharp11/Operators.cs b/csharp/ql/test/library-tests/csharp11/Operators.cs new file mode 100644 index 00000000000..d5c4f8be091 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/Operators.cs @@ -0,0 +1,20 @@ + +public class MyClass +{ + public void M1() + { + var x1 = 1; + var x2 = x1 >>> 2; + + var y1 = -2; + var y2 = y1 >>> 3; + + var z = -4; + z >>>= 5; + } +} + +public class MyOperatorClass +{ + public static MyOperatorClass operator >>>(MyOperatorClass a, MyOperatorClass b) { return null; } +} \ No newline at end of file diff --git a/csharp/ql/test/library-tests/csharp11/SignAnalysis.cs b/csharp/ql/test/library-tests/csharp11/SignAnalysis.cs new file mode 100644 index 00000000000..09e7ceb9fdc --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/SignAnalysis.cs @@ -0,0 +1,42 @@ +public class MySignAnalysis +{ + + public void UnsignedRightShiftSign(int x, int y) + { + int z; + if (x == 0) + { + z = x >>> y; + } + + if (y == 0) + { + z = x >>> y; + } + + if (x > 0 && y == 0) + { + z = x >>> y; + } + + if (x > 0 && y > 0) + { + z = x >>> y; + } + + if (x > 0 && y < 0) + { + z = x >>> y; + } + + if (x < 0 && y > 0) + { + z = x >>> y; + } + + if (x < 0 && y < 0) + { + z = x >>> y; + } + } +} \ No newline at end of file diff --git a/csharp/ql/test/library-tests/csharp11/StaticInterfaceMembers.cs b/csharp/ql/test/library-tests/csharp11/StaticInterfaceMembers.cs new file mode 100644 index 00000000000..6be0ddc54b1 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/StaticInterfaceMembers.cs @@ -0,0 +1,34 @@ +public interface INumber where T : INumber +{ + static abstract T operator ++(T other); + + static virtual T operator --(T other) => other; + + static abstract T Add(T left, T right); + + static virtual T Subtract(T left, T right) => left; + + static T Zero() => default(T); +} + +public class Complex : INumber +{ + public double Real { get; private set; } = 0.0; + public double Imaginary { get; private set; } = 0.0; + + public Complex() { } + + public static Complex Zero() => new Complex(); + + public static Complex operator ++(Complex other) => + new Complex { Real = other.Real + 1.0, Imaginary = other.Imaginary }; + + public static Complex operator --(Complex other) => + new Complex { Real = other.Real - 1.0, Imaginary = other.Imaginary }; + + public static Complex Add(Complex left, Complex right) => + new Complex { Real = left.Real + right.Real, Imaginary = left.Imaginary + right.Imaginary }; + + public static Complex Subtract(Complex left, Complex right) => + new Complex { Real = left.Real - right.Real, Imaginary = left.Imaginary - right.Imaginary }; +} \ No newline at end of file diff --git a/csharp/ql/test/library-tests/csharp11/cil/Assembly.cs_ b/csharp/ql/test/library-tests/csharp11/cil/Assembly.cs_ new file mode 100644 index 00000000000..3511e152a5e --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/cil/Assembly.cs_ @@ -0,0 +1,16 @@ +using System; + +namespace Assembly +{ + public class MyAssemblyGeneric1Attribute : Attribute { } + public class MyAssemblyGeneric2Attribute : Attribute { } + + public class TestAssemblyGenericAttribute + { + [MyAssemblyGeneric1Attribute()] + public void M1() { } + + [MyAssemblyGeneric2()] + public void M2() { } + } +} diff --git a/csharp/ql/test/library-tests/csharp11/cil/assembly.dll b/csharp/ql/test/library-tests/csharp11/cil/assembly.dll new file mode 100644 index 00000000000..790a657a8d8 Binary files /dev/null and b/csharp/ql/test/library-tests/csharp11/cil/assembly.dll differ diff --git a/csharp/ql/test/library-tests/csharp11/cil/class1.cs b/csharp/ql/test/library-tests/csharp11/cil/class1.cs new file mode 100644 index 00000000000..141d836fd9e --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/cil/class1.cs @@ -0,0 +1,7 @@ +using System; +using Assembly; + +public class Class1 +{ + public static void Main(string[] args) { } +} \ No newline at end of file diff --git a/csharp/ql/test/library-tests/csharp11/cil/genericAttribute.expected b/csharp/ql/test/library-tests/csharp11/cil/genericAttribute.expected new file mode 100644 index 00000000000..2ff7cf5d931 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/cil/genericAttribute.expected @@ -0,0 +1,2 @@ +| assembly.dll:0:0:0:0 | [MyAssemblyGeneric1Attribute(...)] | MyAssemblyGeneric1Attribute | 1 | (Object) | +| assembly.dll:0:0:0:0 | [MyAssemblyGeneric2Attribute(...)] | MyAssemblyGeneric2Attribute | 2 | (Int32,String) | diff --git a/csharp/ql/test/library-tests/csharp11/cil/genericAttribute.ql b/csharp/ql/test/library-tests/csharp11/cil/genericAttribute.ql new file mode 100644 index 00000000000..1b80efa1d89 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/cil/genericAttribute.ql @@ -0,0 +1,9 @@ +import semmle.code.cil.CIL + +private string getTypeArguments(GenericAttribute a) { + result = "(" + concat(Type t | t = a.getATypeArgument() | t.getName(), ",") + ")" +} + +from GenericAttribute a +where a.getFile().getStem() = "assembly" +select a, a.getType().getName(), a.getNumberOfTypeArguments(), getTypeArguments(a) diff --git a/csharp/ql/test/library-tests/csharp11/cil/options b/csharp/ql/test/library-tests/csharp11/cil/options new file mode 100644 index 00000000000..8511aa162b8 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/cil/options @@ -0,0 +1 @@ +semmle-extractor-options: --cil diff --git a/csharp/ql/test/library-tests/csharp11/genericAttribute.expected b/csharp/ql/test/library-tests/csharp11/genericAttribute.expected new file mode 100644 index 00000000000..7a2a3d252ea --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/genericAttribute.expected @@ -0,0 +1,6 @@ +| GenericAttribute.cs:3:12:3:34 | [assembly: MyGeneric(...)] | MyGenericAttribute | 1 | (Int32) | GenericAssemblyAttribute | +| GenericAttribute.cs:4:10:4:35 | [module: MyGeneric2(...)] | MyGeneric2Attribute | 2 | (Object) | GenericModuleAttribute | +| GenericAttribute.cs:12:6:12:28 | [MyGeneric(...)] | MyGenericAttribute | 1 | (Int32) | GenericDefaultAttribute | +| GenericAttribute.cs:15:6:15:22 | [MyGeneric(...)] | MyGenericAttribute | 1 | (String) | GenericDefaultAttribute | +| GenericAttribute.cs:18:6:18:28 | [MyGeneric2(...)] | MyGeneric2Attribute | 2 | (Int32,String) | GenericDefaultAttribute | +| GenericAttribute.cs:21:14:21:30 | [return: MyGeneric(...)] | MyGenericAttribute | 1 | (Object) | GenericReturnAttribute | diff --git a/csharp/ql/test/library-tests/csharp11/genericAttribute.ql b/csharp/ql/test/library-tests/csharp11/genericAttribute.ql new file mode 100644 index 00000000000..79f5ccfc741 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/genericAttribute.ql @@ -0,0 +1,10 @@ +import csharp + +private string getTypeArguments(GenericAttribute a) { + result = "(" + concat(Type t | t = a.getATypeArgument() | t.getName(), ",") + ")" +} + +from GenericAttribute a +where a.getFile().getStem() = "GenericAttribute" +select a, a.getType().getName(), a.getNumberOfTypeArguments(), getTypeArguments(a), + a.getAPrimaryQlClass() diff --git a/csharp/ql/test/library-tests/csharp11/operators.expected b/csharp/ql/test/library-tests/csharp11/operators.expected new file mode 100644 index 00000000000..2c7bda6800d --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/operators.expected @@ -0,0 +1,8 @@ +binarybitwise +| Operators.cs:7:18:7:25 | ... >>> ... | Operators.cs:7:18:7:19 | access to local variable x1 | Operators.cs:7:25:7:25 | 2 | >>> | UnsignedRightShiftExpr | +| Operators.cs:10:18:10:25 | ... >>> ... | Operators.cs:10:18:10:19 | access to local variable y1 | Operators.cs:10:25:10:25 | 3 | >>> | UnsignedRightShiftExpr | +| Operators.cs:13:9:13:16 | ... >>> ... | Operators.cs:13:9:13:9 | access to local variable z | Operators.cs:13:16:13:16 | 5 | >>> | UnsignedRightShiftExpr | +assignbitwise +| Operators.cs:13:9:13:16 | ... >>>= ... | Operators.cs:13:9:13:9 | access to local variable z | Operators.cs:13:16:13:16 | 5 | >>>= | AssignUnsighedRightShiftExpr | +userdefined +| Operators.cs:19:44:19:46 | >>> | op_UnsignedRightShift | UnsignedRightShiftOperator | diff --git a/csharp/ql/test/library-tests/csharp11/operators.ql b/csharp/ql/test/library-tests/csharp11/operators.ql new file mode 100644 index 00000000000..607efac0c26 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/operators.ql @@ -0,0 +1,27 @@ +import csharp + +query predicate binarybitwise( + BinaryBitwiseOperation op, Expr left, Expr right, string name, string qlclass +) { + op.getFile().getStem() = "Operators" and + left = op.getLeftOperand() and + right = op.getRightOperand() and + name = op.getOperator() and + qlclass = op.getAPrimaryQlClass() +} + +query predicate assignbitwise( + AssignBitwiseOperation op, Expr left, Expr right, string name, string qlclass +) { + op.getFile().getStem() = "Operators" and + left = op.getLValue() and + right = op.getRValue() and + name = op.getOperator() and + qlclass = op.getAPrimaryQlClass() +} + +query predicate userdefined(Operator op, string fname, string qlclass) { + op.getFile().getStem() = "Operators" and + fname = op.getFunctionName() and + qlclass = op.getAPrimaryQlClass() +} diff --git a/csharp/ql/test/library-tests/csharp11/signAnalysis.expected b/csharp/ql/test/library-tests/csharp11/signAnalysis.expected new file mode 100644 index 00000000000..952719939ad --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/signAnalysis.expected @@ -0,0 +1,7 @@ +| SignAnalysis.cs:9:17:9:23 | ... >>> ... | 0 | +| SignAnalysis.cs:14:17:14:23 | ... >>> ... | + - 0 | +| SignAnalysis.cs:19:17:19:23 | ... >>> ... | + | +| SignAnalysis.cs:24:17:24:23 | ... >>> ... | + 0 | +| SignAnalysis.cs:29:17:29:23 | ... >>> ... | + 0 | +| SignAnalysis.cs:34:17:34:23 | ... >>> ... | + - | +| SignAnalysis.cs:39:17:39:23 | ... >>> ... | + - | diff --git a/csharp/ql/test/library-tests/csharp11/signAnalysis.ql b/csharp/ql/test/library-tests/csharp11/signAnalysis.ql new file mode 100644 index 00000000000..2aeb57e29fb --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/signAnalysis.ql @@ -0,0 +1,9 @@ +import csharp +import semmle.code.csharp.dataflow.internal.rangeanalysis.SignAnalysisCommon as Common + +from ControlFlow::Nodes::ExprNode e, Expr expr +where + e.getExpr() = expr and + expr.getFile().getStem() = "SignAnalysis" and + expr instanceof UnsignedRightShiftExpr +select e, strictconcat(string s | s = Common::exprSign(e).toString() | s, " ") diff --git a/csharp/ql/test/library-tests/csharp11/staticInterfaceMembers.expected b/csharp/ql/test/library-tests/csharp11/staticInterfaceMembers.expected new file mode 100644 index 00000000000..c5068de6372 --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/staticInterfaceMembers.expected @@ -0,0 +1,20 @@ +interfacemembers +| INumber<> | StaticInterfaceMembers.cs:3:32:3:33 | ++ | abstract | +| INumber<> | StaticInterfaceMembers.cs:3:32:3:33 | ++ | public | +| INumber<> | StaticInterfaceMembers.cs:3:32:3:33 | ++ | static | +| INumber<> | StaticInterfaceMembers.cs:5:31:5:32 | -- | public | +| INumber<> | StaticInterfaceMembers.cs:5:31:5:32 | -- | static | +| INumber<> | StaticInterfaceMembers.cs:5:31:5:32 | -- | virtual | +| INumber<> | StaticInterfaceMembers.cs:7:23:7:25 | Add | abstract | +| INumber<> | StaticInterfaceMembers.cs:7:23:7:25 | Add | public | +| INumber<> | StaticInterfaceMembers.cs:7:23:7:25 | Add | static | +| INumber<> | StaticInterfaceMembers.cs:9:22:9:29 | Subtract | public | +| INumber<> | StaticInterfaceMembers.cs:9:22:9:29 | Subtract | static | +| INumber<> | StaticInterfaceMembers.cs:9:22:9:29 | Subtract | virtual | +| INumber<> | StaticInterfaceMembers.cs:11:14:11:17 | Zero | public | +| INumber<> | StaticInterfaceMembers.cs:11:14:11:17 | Zero | static | +implements +| StaticInterfaceMembers.cs:23:36:23:37 | ++ | StaticInterfaceMembers.cs:3:32:3:33 | ++ | +| StaticInterfaceMembers.cs:26:36:26:37 | -- | StaticInterfaceMembers.cs:5:31:5:32 | -- | +| StaticInterfaceMembers.cs:29:27:29:29 | Add | StaticInterfaceMembers.cs:7:23:7:25 | Add | +| StaticInterfaceMembers.cs:32:27:32:34 | Subtract | StaticInterfaceMembers.cs:9:22:9:29 | Subtract | diff --git a/csharp/ql/test/library-tests/csharp11/staticInterfaceMembers.ql b/csharp/ql/test/library-tests/csharp11/staticInterfaceMembers.ql new file mode 100644 index 00000000000..0d92606e4dd --- /dev/null +++ b/csharp/ql/test/library-tests/csharp11/staticInterfaceMembers.ql @@ -0,0 +1,18 @@ +import csharp + +query predicate interfacemembers(string interface, Member m, string modifier) { + exists(Interface i | + i.isUnboundDeclaration() and + i.getFile().getStem() = "StaticInterfaceMembers" and + i.getName() = interface and + m = i.getAMember() and + modifier = m.getAModifier().getName() + ) +} + +query predicate implements(Overridable o, Virtualizable v) { + v.getFile().getStem() = "StaticInterfaceMembers" and + (v.isVirtual() or v.isAbstract()) and + v.isStatic() and + v.getAnImplementor() = o +} diff --git a/csharp/ql/test/library-tests/indexers/PrintAst.expected b/csharp/ql/test/library-tests/indexers/PrintAst.expected index cd97a04290a..36f15f11909 100644 --- a/csharp/ql/test/library-tests/indexers/PrintAst.expected +++ b/csharp/ql/test/library-tests/indexers/PrintAst.expected @@ -25,7 +25,7 @@ indexers.cs: # 18| -1: [TypeMention] Int32[] # 18| 1: [TypeMention] int # 18| 0: [AddExpr] ... + ... -# 18| 0: [RShiftExpr] ... >> ... +# 18| 0: [RightShiftExpr] ... >> ... # 18| 0: [SubExpr] ... - ... # 18| 0: [ParameterAccess] access to parameter length # 18| 1: [IntLiteral] 1 @@ -68,10 +68,10 @@ indexers.cs: # 32| 0: [BitwiseAndExpr] ... & ... # 32| 0: [ArrayAccess] access to array element # 32| -1: [FieldAccess] access to field bits -# 32| 0: [RShiftExpr] ... >> ... +# 32| 0: [RightShiftExpr] ... >> ... # 32| 0: [ParameterAccess] access to parameter index # 32| 1: [IntLiteral] 5 -# 32| 1: [LShiftExpr] ... << ... +# 32| 1: [LeftShiftExpr] ... << ... # 32| 0: [IntLiteral] 1 # 32| 1: [ParameterAccess] access to parameter index # 32| 1: [IntLiteral] 0 @@ -99,10 +99,10 @@ indexers.cs: # 42| 0: [AssignOrExpr] ... |= ... # 42| 0: [ArrayAccess] access to array element # 42| -1: [FieldAccess] access to field bits -# 42| 0: [RShiftExpr] ... >> ... +# 42| 0: [RightShiftExpr] ... >> ... # 42| 0: [ParameterAccess] access to parameter index # 42| 1: [IntLiteral] 5 -# 42| 1: [LShiftExpr] ... << ... +# 42| 1: [LeftShiftExpr] ... << ... # 42| 0: [IntLiteral] 1 # 42| 1: [ParameterAccess] access to parameter index # 45| 2: [BlockStmt] {...} @@ -110,11 +110,11 @@ indexers.cs: # 46| 0: [AssignAndExpr] ... &= ... # 46| 0: [ArrayAccess] access to array element # 46| -1: [FieldAccess] access to field bits -# 46| 0: [RShiftExpr] ... >> ... +# 46| 0: [RightShiftExpr] ... >> ... # 46| 0: [ParameterAccess] access to parameter index # 46| 1: [IntLiteral] 5 # 46| 1: [ComplementExpr] ~... -# 46| 0: [LShiftExpr] ... << ... +# 46| 0: [LeftShiftExpr] ... << ... # 46| 0: [IntLiteral] 1 # 46| 1: [ParameterAccess] access to parameter index # 53| 2: [Class] CountPrimes diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.qlref b/csharp/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.qlref deleted file mode 100644 index cb6ef7faa65..00000000000 --- a/csharp/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureNeutralModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureSinkModels.qlref b/csharp/ql/test/utils/model-generator/dataflow/CaptureSinkModels.qlref deleted file mode 100644 index c478ac760c4..00000000000 --- a/csharp/ql/test/utils/model-generator/dataflow/CaptureSinkModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureSinkModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureSourceModels.qlref b/csharp/ql/test/utils/model-generator/dataflow/CaptureSourceModels.qlref deleted file mode 100644 index 10593c28e92..00000000000 --- a/csharp/ql/test/utils/model-generator/dataflow/CaptureSourceModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureSourceModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.qlref b/csharp/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.qlref deleted file mode 100644 index 1ebf2afb19b..00000000000 --- a/csharp/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureSummaryModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.qlref b/csharp/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.qlref deleted file mode 100644 index 99c0975a4c2..00000000000 --- a/csharp/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureTypeBasedSummaryModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.expected b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.expected similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.expected rename to csharp/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.expected diff --git a/csharp/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.qlref b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.qlref new file mode 100644 index 00000000000..851ddc0d294 --- /dev/null +++ b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureNeutralModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureSinkModels.expected b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.expected similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/CaptureSinkModels.expected rename to csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.expected diff --git a/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.qlref b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.qlref new file mode 100644 index 00000000000..36d2f144247 --- /dev/null +++ b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureSinkModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureSourceModels.expected b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.expected similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/CaptureSourceModels.expected rename to csharp/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.expected diff --git a/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.qlref b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.qlref new file mode 100644 index 00000000000..6bbb499fc27 --- /dev/null +++ b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureSourceModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.expected b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.expected similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.expected rename to csharp/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.expected diff --git a/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.qlref b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.qlref new file mode 100644 index 00000000000..d751f3823f3 --- /dev/null +++ b/csharp/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureSummaryModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/dataflow/NoSummaries.cs b/csharp/ql/test/utils/modelgenerator/dataflow/NoSummaries.cs similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/NoSummaries.cs rename to csharp/ql/test/utils/modelgenerator/dataflow/NoSummaries.cs diff --git a/csharp/ql/test/utils/model-generator/dataflow/Sinks.cs b/csharp/ql/test/utils/modelgenerator/dataflow/Sinks.cs similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/Sinks.cs rename to csharp/ql/test/utils/modelgenerator/dataflow/Sinks.cs diff --git a/csharp/ql/test/utils/model-generator/dataflow/Sources.cs b/csharp/ql/test/utils/modelgenerator/dataflow/Sources.cs similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/Sources.cs rename to csharp/ql/test/utils/modelgenerator/dataflow/Sources.cs diff --git a/csharp/ql/test/utils/model-generator/dataflow/Summaries.cs b/csharp/ql/test/utils/modelgenerator/dataflow/Summaries.cs similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/Summaries.cs rename to csharp/ql/test/utils/modelgenerator/dataflow/Summaries.cs diff --git a/csharp/ql/test/utils/model-generator/dataflow/options b/csharp/ql/test/utils/modelgenerator/dataflow/options similarity index 100% rename from csharp/ql/test/utils/model-generator/dataflow/options rename to csharp/ql/test/utils/modelgenerator/dataflow/options diff --git a/csharp/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.expected b/csharp/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.expected similarity index 100% rename from csharp/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.expected rename to csharp/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.expected diff --git a/csharp/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.qlref b/csharp/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.qlref new file mode 100644 index 00000000000..73821d0ff84 --- /dev/null +++ b/csharp/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureTypeBasedSummaryModels.ql \ No newline at end of file diff --git a/csharp/ql/test/utils/model-generator/typebasedflow/TypeBasedSummaries.cs b/csharp/ql/test/utils/modelgenerator/typebasedflow/TypeBasedSummaries.cs similarity index 100% rename from csharp/ql/test/utils/model-generator/typebasedflow/TypeBasedSummaries.cs rename to csharp/ql/test/utils/modelgenerator/typebasedflow/TypeBasedSummaries.cs diff --git a/csharp/tools/pre-finalize.cmd b/csharp/tools/pre-finalize.cmd index 0261f4ef437..0ee982b6585 100644 --- a/csharp/tools/pre-finalize.cmd +++ b/csharp/tools/pre-finalize.cmd @@ -7,6 +7,7 @@ type NUL && "%CODEQL_DIST%\codeql" database index-files ^ --include-extension=.xml ^ --size-limit 10m ^ --language xml ^ + --working-dir=. ^ -- ^ "%CODEQL_EXTRACTOR_CSHARP_WIP_DATABASE%" ^ >nul 2>&1 diff --git a/csharp/tools/pre-finalize.sh b/csharp/tools/pre-finalize.sh index 042ba044fb6..b0abd28f9ee 100755 --- a/csharp/tools/pre-finalize.sh +++ b/csharp/tools/pre-finalize.sh @@ -9,6 +9,7 @@ set -eu --include-extension=.xml \ --size-limit 10m \ --language xml \ + --working-dir=. \ -- \ "$CODEQL_EXTRACTOR_CSHARP_WIP_DATABASE" \ > /dev/null 2>&1 diff --git a/docs/codeql/CONTRIBUTING.md b/docs/codeql/CONTRIBUTING.md new file mode 100644 index 00000000000..7272b95f173 --- /dev/null +++ b/docs/codeql/CONTRIBUTING.md @@ -0,0 +1,18 @@ +# Contributing to CodeQL docs + +We welcome contributions to our CodeQL docs. Want to improve existing docs or add new information you think would be helpful? Then please go ahead and open a pull request! + +## Contributing to CodeQL docs on `codeql.github.com` + +To make changes to the documentation on [codeql.github.com](https://codeql.github.com/docs/codeql-overview/), you can make changes to the documentation files using the GitHub UI, a codespace, or a local text editor, and then open a pull request for review. For more information about the format and structure of the CodeQL documentation on [codeql.github.com](https://codeql.github.com/docs/codeql-overview/), please see the [README](docs/codeql/README.rst). + +## Contributing to CodeQL CLI docs on `docs.github.com` + +We are in the process of moving all documentation about the CodeQL CLI from [github/codeql](docs/codeql) to the public [github/docs](https://github.com/github/docs) repository so that this documentation is published on the [GitHub Docs](https://docs.github.com/en/code-security/code-scanning) site. This includes all articles that are currently published under "[Using the CodeQL CLI](https://codeql.github.com/docs/codeql-cli/using-the-codeql-cli/)" and "[CodeQL CLI reference](https://codeql.github.com/docs/codeql-cli/codeql-cli-reference/)" categories on the CodeQL microsite. This will make it easier for code scanning users to find information about using CodeQL to query their codebases. + +**Note**: For a brief time, we will have source files for CodeQL CLI documentation in two locations. During this period we will not accept changes to the old files in the `codeql` repository, only to the new files in the `docs` repository. + +To contribute to these docs, which are located in the [`code-scanning`](https://github.com/github/docs/tree/main/content/code-security/code-scanning) directory, please refer to the [CONTRIBUTING.md](CONTRIBUTING.md) file in the `docs` repository. + + + diff --git a/docs/codeql/README.rst b/docs/codeql/README.rst index a07d15c27e1..70686aae436 100644 --- a/docs/codeql/README.rst +++ b/docs/codeql/README.rst @@ -12,6 +12,8 @@ see https://docutils.sourceforge.io/rst.html. For more information on Sphinx, see https://www.sphinx-doc.org. +For information on contributing to CodeQL documentation, see the `contributing guide `__. + Project structure ***************** diff --git a/docs/codeql/codeql-cli/about-codeql-packs.rst b/docs/codeql/codeql-cli/about-codeql-packs.rst index 68f67cb7ba9..9e67dd19140 100644 --- a/docs/codeql/codeql-cli/about-codeql-packs.rst +++ b/docs/codeql/codeql-cli/about-codeql-packs.rst @@ -9,8 +9,8 @@ CodeQL packs are used to create, share, depend on, and run CodeQL queries and li There are two types of CodeQL packs: query packs and library packs. -* Query packs are designed to be run. When a query pack is published, the bundle includes all the transitive dependencies and a compilation cache. This ensures consistent and efficient execution of the queries in the pack. -* Library packs are designed to be used by query packs (or other library packs) and do not contain queries themselves. The libraries are not compiled and there is no compilation cache included when the pack is published. +* Query packs are designed to be run. When a query pack is published, the bundle includes all the transitive dependencies and pre-compiled representations of each query, in addition to the query sources. This ensures consistent and efficient execution of the queries in the pack. +* Library packs are designed to be used by query packs (or other library packs) and do not contain queries themselves. The libraries are not compiled separately. You can use the package management commands in the CodeQL CLI to create CodeQL packs, add dependencies to packs, and install or update dependencies. For more information, see ":ref:`Creating and working with CodeQL packs `." You can also publish and download CodeQL packs using the CodeQL CLI. For more information, see ":doc:`Publishing and using CodeQL packs `." @@ -31,6 +31,16 @@ The other files and directories within the pack should be logically organized. F - Queries for specific products, libraries, and frameworks are organized into their own top-level directories. +About published packs +~~~~~~~~~~~~~~~~~~~~~~~~~ + +When a pack is published for use in analyses, the ``codeql pack create`` or ``codeql pack publish`` command verifies that the content is complete and also adds some additional pieces of content to it: + +* For query packs, a copy of each of the library packs it depends on, in the precise versions it has been developed with. Users of the query pack won't need to download these library packs separately. +* For query packs, precompiled representations of each of the queries. These are faster to execute than it would be to compile the QL source for the query at each analysis. + +Most of this data is located in a directory named ``.codeql`` in the published pack, but precompiled queries are in files with a ``.qlx`` suffix next to the ``.ql`` source for each query. When analyzing a database with a query from a published pack, CodeQL will load these files instead of the ``.ql`` source. If you need to modify the content of a *published* pack, be sure to remove all of the ``.qlx`` files, since they may prevent modifications in the ``.ql`` files from taking effect. + About ``qlpack.yml`` files -------------------------- diff --git a/docs/codeql/codeql-cli/creating-and-working-with-codeql-packs.rst b/docs/codeql/codeql-cli/creating-and-working-with-codeql-packs.rst index 7d2001dded5..f19788f1afc 100644 --- a/docs/codeql/codeql-cli/creating-and-working-with-codeql-packs.rst +++ b/docs/codeql/codeql-cli/creating-and-working-with-codeql-packs.rst @@ -14,11 +14,13 @@ With CodeQL packs and the package management commands in the CodeQL CLI, you can There are two types of CodeQL packs: query packs and library packs. -* Query packs are designed to be run. When a query pack is published, the bundle includes all the transitive dependencies and a compilation cache. This ensures consistent and efficient execution of the queries in the pack. -* Library packs are designed to be used by query packs (or other library packs) and do not contain queries themselves. The libraries are not compiled and there is no compilation cache included when the pack is published. +* Query packs are designed to be run. When a query pack is published, the bundle includes all the transitive dependencies and pre-compiled representations of each query, in addition to the query sources. This ensures consistent and efficient execution of the queries in the pack. +* Library packs are designed to be used by query packs (or other library packs) and do not contain queries themselves. The libraries are not compiled separately. You can use the ``pack`` command in the CodeQL CLI to create CodeQL packs, add dependencies to packs, and install or update dependencies. You can also publish and download CodeQL packs using the ``pack`` command. For more information, see ":doc:`Publishing and using CodeQL packs `." +For more information about compatibility between published query packs and different CodeQL releases, see ":ref:`About CodeQL pack compatibility `." + Creating a CodeQL pack ---------------------- You can create a CodeQL pack by running the following command from the checkout root of your project: @@ -81,3 +83,13 @@ This command downloads all dependencies to the shared cache on the local disk. By default ``codeql pack install`` will install dependencies from the Container registry on GitHub.com. You can install dependencies from a GitHub Enterprise Server Container registry by creating a ``qlconfig.yml`` file. For more information, see ":doc:`Publishing and using CodeQL packs `." + +Customizing a downloaded CodeQL pack +--------------------------------------------------- + +The recommended way to experiment with changes to a pack is to clone the repository containing its source code. + +If no source respository is available and you need to base modifications on a pack downloaded from the Container registry, be aware that these packs are not intended to be modified or customized after downloading, and their format may change in the future without much notice. We recommend taking the following steps after downloading a pack if you need to modify the content: + +- Change the pack *name* in ``qlpack.yml`` so you avoid confusion with results from the unmodified pack. +- Remove all files named ``*.qlx`` anywhere in the unpacked directory structure. These files contain precompiled versions of the queries, and in some situations CodeQL will use them in preference to the QL source you have modified. \ No newline at end of file diff --git a/docs/codeql/codeql-cli/publishing-and-using-codeql-packs.rst b/docs/codeql/codeql-cli/publishing-and-using-codeql-packs.rst index a91bc570768..b8dbc4bd6e5 100644 --- a/docs/codeql/codeql-cli/publishing-and-using-codeql-packs.rst +++ b/docs/codeql/codeql-cli/publishing-and-using-codeql-packs.rst @@ -53,6 +53,9 @@ To run a pack that someone else has created, you must first download it by runni This command accepts arguments for multiple packs. +If you write scripts that specify a particular version number of a query pack to download, keep in mind that when you update your version of CodeQL to a newer one, you may also need to switch to a newer version of the query pack. Newer versions of CodeQL *may* provide +degraded performance when used with query packs that have been pinned to a very old version. For more information, see ":ref:`About CodeQL pack compatibility `." + Using a CodeQL pack to analyze a CodeQL database ------------------------------------------------ @@ -74,6 +77,45 @@ The ``analyze`` command will run the default suite of any specified CodeQL packs codeql analyze / / +.. pull-quote:: + + Note + + The ``codeql pack download`` command stores the pack it downloads in an internal location that is not intended for local modification. Unexpected (and hard to troubleshoot) behavior may result if the pack is modified after downloading. For more information about customizing packs, see ":ref:`Creating and working with CodeQL packs `." + +.. _about-codeql-pack-compatibility: + +About CodeQL pack compatibility +------------------------------- + +When a query pack is published, it includes pre-compiled representations of all the queries in it. These pre-compiled queries are generally much faster to execute than it is to compile the QL source from scratch during the analysis. However, the pre-compiled queries also depend on certain internals of the QL evaluator, so if the version of CodeQL that performs the analysis is too different from the version that ran ``codeql pack publish``, it may be necessary to compile the queries from source instead during analysis. The recompilation happens automatically and will not affect the *results* of the analysis, but it can make the +analysis significantly slower. + +It can generally be assumed that if a pack is published with one release of CodeQL, the precompiled queries in it can be used directly by *later* releases of CodeQL, as long as there is no more than 6 months between the release dates. We will make reasonable efforts to keep new releases compatible for longer than that, but make no promises. + +It can also be assumed that a pack published by the *latest* public release of CodeQL will be useable by the version of CodeQL that is used by code scanning and GitHub Actions, even though that is often a slightly older release. + +As an exception to the above, packs published with versions of CodeQL *earlier than 2.12.0* are not compatible with any earlier or later versions. These old versions did not write pre-compiled queries in a format that supported compatibility between releases. Packs published by these versions can still be *used* by newer versions, but the analysis will be slower because the queries have to be recompiled first. + +As a user of a published query pack, you can check that the CodeQL makes use of the precompiled queries in it by inspecting the terminal output from an analysis runs that uses the query pack. If it contains lines looking like the following, then the precompiled queries were used successfully: + +:: + + [42/108] Loaded /long/path/to/query/Filename.qlx. + +However, if they instead look like the following, then usage of the precompiled queries failed: + +:: + + Compiling query plan for /long/path/to/query/Filename.ql. + [42/108 comp 25s] Compiled /long/path/to/query/Filename.ql. + +The results of the analysis will still be good in this case, but to get optimal performance you may need to upgrade to a newer version of the CodeQL CLI and/or of the query pack. + +If you publish query packs on the Container registry on GitHub.com for others to use, we recommend that you use a recent release of CodeQL to run ``codeql pack publish``, and that you publish a fresh version of your pack with an updated CodeQL version before the version you used turns 6 months old. That way you can ensure that users of your pack who keep *their* CodeQL up to date will benefit from the pre-compiled queries in your pack. + +If you publish query packs with the intention of using them on a GitHub Enterprise Server installation that uses its bundled CodeQL binaries, use the same CodeQL version to run ``codeql pack publish``. Newer versions might produce pre-compiled queries that the one in GitHub Enterprise Server may not recognize. Your GitHub Enterprise Server administrator may choose to upgrade to a newer version of CodeQL periodically. If so, follow their lead. + .. _working-with-codeql-packs-on-ghes: Working with CodeQL packs on GitHub Enterprise Server diff --git a/docs/codeql/ql-language-reference/name-resolution.rst b/docs/codeql/ql-language-reference/name-resolution.rst index c14147d533e..55463c630d4 100644 --- a/docs/codeql/ql-language-reference/name-resolution.rst +++ b/docs/codeql/ql-language-reference/name-resolution.rst @@ -29,6 +29,10 @@ In summary, the kinds of expressions are: - These refer to predicates. - They can be simple :ref:`names ` or names with arities (for example in an :ref:`alias ` definition), or :ref:`selections `. + - **signature expressions** + - These refer to module signatures, type signatures, or predicate signatures. + - They can be simple :ref:`names `, names with arities, :ref:`selections `, + or :ref:`instantiations `. .. _names: @@ -164,14 +168,27 @@ As in many other programming languages, a namespace is a mapping from **keys** t **entities**. A key is a kind of identifier, for example a name, and a QL entity is a :ref:`module `, a :ref:`type `, or a :ref:`predicate `. -Each module in QL has three namespaces: +Each module in QL has six namespaces: - The **module namespace**, where the keys are module names and the entities are modules. - The **type namespace**, where the keys are type names and the entities are types. - The **predicate namespace**, where the keys are pairs of predicate names and arities, and the entities are predicates. + - The **module signature namespace**, where the keys are module signature names and the entities are module signatures. + - The **type signature namespace**, where the keys are type signature names and the entities are type signatures. + - The **predicate signature namespace**, where the keys are pairs of predicate signature names and arities, + and the entities are predicate signatures. -It's important to know that there is no relation between names in different namespaces. +The six namespaces of any module are not completely independent of each other: + + - No keys may be shared between the **module namespace** and the **module signature namespace**. + - No keys may be shared between the **type namespace** and the **type signature namespace**. + - No keys may be shared between the **module namespace** and the **type signature namespace**. + - No keys may be shared between the **type namespace** and the **module signature namespace**. + - No keys may be shared between the **predicate namespace** and the **predicate signature namespace**. + - No keys may be shared between the **module signature namespace** and the **type signature namespace**. + +There is no relation between names in namespaces of different modules. For example, two different modules can define a predicate ``getLocation()`` without confusion. As long as it's clear which namespace you are in, the QL compiler resolves the name to the correct predicate. @@ -182,11 +199,12 @@ The namespaces containing all the built-in entities are called **global namespac and are automatically available in any module. In particular: - - The **global module namespace** is empty. + - The **global module namespace** has a single entry ``QlBuiltins``. - The **global type namespace** has entries for the :ref:`primitive types ` ``int``, ``float``, ``string``, ``boolean``, and ``date``, as well as any :ref:`database types ` defined in the database schema. - The **global predicate namespace** includes all the `built-in predicates `_, as well as any :ref:`database predicates `. + - The **global signature namespaces** are empty. In practice, this means that you can use the built-in types and predicates directly in a QL module (without importing any libraries). You can also use any database predicates and types directly—these depend on the diff --git a/docs/codeql/ql-language-reference/ql-language-specification.rst b/docs/codeql/ql-language-reference/ql-language-specification.rst index 39a5731745f..2e5091b03b9 100644 --- a/docs/codeql/ql-language-reference/ql-language-specification.rst +++ b/docs/codeql/ql-language-reference/ql-language-specification.rst @@ -86,13 +86,25 @@ use information from the database. Name resolution --------------- -All modules have three environments that dictate name resolution. These are multimaps of keys to declarations. +All modules have six environments that dictate name resolution. These are multimaps of keys to declarations. The environments are: - The *module environment*, whose keys are module names and whose values are modules. - The *type environment*, whose keys are type names and whose values are types. - The *predicate environment*, whose keys are pairs of predicate names and arities and whose values are predicates. +- The *module signature environment*, whose keys are module signature names and whose values are module signatures. +- The *type signature environment*, whose keys are type signature names and whose values are type signatures. +- The *predicate signature environment*, whose keys are pairs of predicate signature names and arities and whose values are predicate signatures. + +For each module, some namespaces are enforced to be disjoint: + +- No keys may be shared between the **module namespace** and the **module signature namespace**. +- No keys may be shared between the **type namespace** and the **type signature namespace**. +- No keys may be shared between the **module namespace** and the **type signature namespace**. +- No keys may be shared between the **type namespace** and the **module signature namespace**. +- No keys may be shared between the **predicate namespace** and the **predicate signature namespace**. +- No keys may be shared between the **module signature namespace** and the **type signature namespace**. If not otherwise specified, then the environment for a piece of syntax is the same as the environment of its enclosing syntax. @@ -108,12 +120,14 @@ A *definite* environment has at most one entry for each key. Resolution is uniqu Global environments ~~~~~~~~~~~~~~~~~~~ -The global module environment is empty. +The global module environment has a single entry ``QlBuiltins``. The global type environment has entries for the primitive types ``int``, ``float``, ``string``, ``boolean``, and ``date``, as well as any types defined in the database schema. The global predicate environment includes all the built-in classless predicates, as well as any extensional predicates declared in the database schema. +The three global signature environments are empty. + The program is invalid if any of these environments is not definite. Module environments diff --git a/docs/codeql/reusables/supported-frameworks.rst b/docs/codeql/reusables/supported-frameworks.rst index 191b40b4896..1c36480e9a7 100644 --- a/docs/codeql/reusables/supported-frameworks.rst +++ b/docs/codeql/reusables/supported-frameworks.rst @@ -148,6 +148,7 @@ and the CodeQL library pack ``codeql/javascript-all`` (`changelog ]*") and result = "Dubious type \"" + type + "\" in " + pred + " model." @@ -362,26 +220,29 @@ module CsvValidation { or not ext.regexpMatch("|Annotated") and result = "Unrecognized extra API graph element \"" + ext + "\" in " + pred + " model." + or + not provenance = ["manual", "generated"] and + result = "Unrecognized provenance description \"" + provenance + "\" in " + pred + " model." ) } - /** Holds if some row in a CSV-based flow model appears to contain typos. */ + /** Holds if some row in a MaD flow model appears to contain typos. */ query predicate invalidModelRow(string msg) { msg = [ getInvalidModelSignature(), getInvalidModelInput(), getInvalidModelOutput(), - getInvalidModelSubtype(), getInvalidModelColumnCount(), getInvalidModelKind() + getInvalidModelKind() ] } } pragma[nomagic] private predicate elementSpec( - string namespace, string type, boolean subtypes, string name, string signature, string ext + string package, string type, boolean subtypes, string name, string signature, string ext ) { - sourceModel(namespace, type, subtypes, name, signature, ext, _, _, _) or - sinkModel(namespace, type, subtypes, name, signature, ext, _, _, _) or - summaryModel(namespace, type, subtypes, name, signature, ext, _, _, _, _) + sourceModel(package, type, subtypes, name, signature, ext, _, _, _) or + sinkModel(package, type, subtypes, name, signature, ext, _, _, _) or + summaryModel(package, type, subtypes, name, signature, ext, _, _, _, _) } private string paramsStringPart(Function f, int i) { @@ -477,7 +338,7 @@ predicate parseContent(string component, DataFlow::Content content) { cached private module Cached { /** - * Holds if `node` is specified as a source with the given kind in a CSV flow + * Holds if `node` is specified as a source with the given kind in a MaD flow * model. */ cached @@ -486,7 +347,7 @@ private module Cached { } /** - * Holds if `node` is specified as a sink with the given kind in a CSV flow + * Holds if `node` is specified as a sink with the given kind in a MaD flow * model. */ cached diff --git a/go/ql/lib/semmle/go/dataflow/ExternalFlowExtensions.qll b/go/ql/lib/semmle/go/dataflow/ExternalFlowExtensions.qll new file mode 100644 index 00000000000..24a8ddf4b8d --- /dev/null +++ b/go/ql/lib/semmle/go/dataflow/ExternalFlowExtensions.qll @@ -0,0 +1,27 @@ +/** + * This module provides extensible predicates for defining MaD models. + */ + +/** + * Holds if a source model exists for the given parameters. + */ +extensible predicate sourceModel( + string package, string type, boolean subtypes, string name, string signature, string ext, + string output, string kind, string provenance +); + +/** + * Holds if a sink model exists for the given parameters. + */ +extensible predicate sinkModel( + string package, string type, boolean subtypes, string name, string signature, string ext, + string input, string kind, string provenance +); + +/** + * Holds if a summary model exists for the given parameters. + */ +extensible predicate summaryModel( + string package, string type, boolean subtypes, string name, string signature, string ext, + string input, string output, string kind, string provenance +); diff --git a/go/ql/lib/semmle/go/dataflow/internal/DataFlowImplForStringsNewReplacer.qll b/go/ql/lib/semmle/go/dataflow/internal/DataFlowImplForStringsNewReplacer.qll new file mode 100644 index 00000000000..7c9edcecfe1 --- /dev/null +++ b/go/ql/lib/semmle/go/dataflow/internal/DataFlowImplForStringsNewReplacer.qll @@ -0,0 +1,4880 @@ +/** + * Provides an implementation of global (interprocedural) data flow. This file + * re-exports the local (intraprocedural) data flow analysis from + * `DataFlowImplSpecific::Public` and adds a global analysis, mainly exposed + * through the `Configuration` class. This file exists in several identical + * copies, allowing queries to use multiple `Configuration` classes that depend + * on each other without introducing mutual recursion among those configurations. + */ + +private import DataFlowImplCommon +private import DataFlowImplSpecific::Private +import DataFlowImplSpecific::Public +import DataFlowImplCommonPublic + +/** + * A configuration of interprocedural data flow analysis. This defines + * sources, sinks, and any other configurable aspect of the analysis. Each + * use of the global data flow library must define its own unique extension + * of this abstract class. To create a configuration, extend this class with + * a subclass whose characteristic predicate is a unique singleton string. + * For example, write + * + * ```ql + * class MyAnalysisConfiguration extends DataFlow::Configuration { + * MyAnalysisConfiguration() { this = "MyAnalysisConfiguration" } + * // Override `isSource` and `isSink`. + * // Optionally override `isBarrier`. + * // Optionally override `isAdditionalFlowStep`. + * } + * ``` + * Conceptually, this defines a graph where the nodes are `DataFlow::Node`s and + * the edges are those data-flow steps that preserve the value of the node + * along with any additional edges defined by `isAdditionalFlowStep`. + * Specifying nodes in `isBarrier` will remove those nodes from the graph, and + * specifying nodes in `isBarrierIn` and/or `isBarrierOut` will remove in-going + * and/or out-going edges from those nodes, respectively. + * + * Then, to query whether there is flow between some `source` and `sink`, + * write + * + * ```ql + * exists(MyAnalysisConfiguration cfg | cfg.hasFlow(source, sink)) + * ``` + * + * Multiple configurations can coexist, but two classes extending + * `DataFlow::Configuration` should never depend on each other. One of them + * should instead depend on a `DataFlow2::Configuration`, a + * `DataFlow3::Configuration`, or a `DataFlow4::Configuration`. + */ +abstract class Configuration extends string { + bindingset[this] + Configuration() { any() } + + /** + * Holds if `source` is a relevant data flow source. + */ + predicate isSource(Node source) { none() } + + /** + * Holds if `source` is a relevant data flow source with the given initial + * `state`. + */ + predicate isSource(Node source, FlowState state) { none() } + + /** + * Holds if `sink` is a relevant data flow sink. + */ + predicate isSink(Node sink) { none() } + + /** + * Holds if `sink` is a relevant data flow sink accepting `state`. + */ + predicate isSink(Node sink, FlowState state) { none() } + + /** + * Holds if data flow through `node` is prohibited. This completely removes + * `node` from the data flow graph. + */ + predicate isBarrier(Node node) { none() } + + /** + * Holds if data flow through `node` is prohibited when the flow state is + * `state`. + */ + predicate isBarrier(Node node, FlowState state) { none() } + + /** Holds if data flow into `node` is prohibited. */ + predicate isBarrierIn(Node node) { none() } + + /** Holds if data flow out of `node` is prohibited. */ + predicate isBarrierOut(Node node) { none() } + + /** + * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead. + * + * Holds if data flow through nodes guarded by `guard` is prohibited. + */ + deprecated predicate isBarrierGuard(BarrierGuard guard) { none() } + + /** + * DEPRECATED: Use `isBarrier` and `BarrierGuard` module instead. + * + * Holds if data flow through nodes guarded by `guard` is prohibited when + * the flow state is `state` + */ + deprecated predicate isBarrierGuard(BarrierGuard guard, FlowState state) { none() } + + /** + * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps. + */ + predicate isAdditionalFlowStep(Node node1, Node node2) { none() } + + /** + * Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps. + * This step is only applicable in `state1` and updates the flow state to `state2`. + */ + predicate isAdditionalFlowStep(Node node1, FlowState state1, Node node2, FlowState state2) { + none() + } + + /** + * Holds if an arbitrary number of implicit read steps of content `c` may be + * taken at `node`. + */ + predicate allowImplicitRead(Node node, ContentSet c) { none() } + + /** + * Gets the virtual dispatch branching limit when calculating field flow. + * This can be overridden to a smaller value to improve performance (a + * value of 0 disables field flow), or a larger value to get more results. + */ + int fieldFlowBranchLimit() { result = 2 } + + /** + * Gets a data flow configuration feature to add restrictions to the set of + * valid flow paths. + * + * - `FeatureHasSourceCallContext`: + * Assume that sources have some existing call context to disallow + * conflicting return-flow directly following the source. + * - `FeatureHasSinkCallContext`: + * Assume that sinks have some existing call context to disallow + * conflicting argument-to-parameter flow directly preceding the sink. + * - `FeatureEqualSourceSinkCallContext`: + * Implies both of the above and additionally ensures that the entire flow + * path preserves the call context. + */ + FlowFeature getAFeature() { none() } + + /** Holds if sources should be grouped in the result of `hasFlowPath`. */ + predicate sourceGrouping(Node source, string sourceGroup) { none() } + + /** Holds if sinks should be grouped in the result of `hasFlowPath`. */ + predicate sinkGrouping(Node sink, string sinkGroup) { none() } + + /** + * Holds if data may flow from `source` to `sink` for this configuration. + */ + predicate hasFlow(Node source, Node sink) { flowsTo(source, sink, this) } + + /** + * Holds if data may flow from `source` to `sink` for this configuration. + * + * The corresponding paths are generated from the end-points and the graph + * included in the module `PathGraph`. + */ + predicate hasFlowPath(PathNode source, PathNode sink) { hasFlowPath(source, sink, this) } + + /** + * Holds if data may flow from some source to `sink` for this configuration. + */ + predicate hasFlowTo(Node sink) { + sink = any(PathNodeSink n | this = n.getConfiguration()).getNodeEx().asNode() + } + + /** + * Holds if data may flow from some source to `sink` for this configuration. + */ + predicate hasFlowToExpr(DataFlowExpr sink) { this.hasFlowTo(exprNode(sink)) } + + /** + * Gets the exploration limit for `hasPartialFlow` and `hasPartialFlowRev` + * measured in approximate number of interprocedural steps. + */ + int explorationLimit() { none() } + + /** + * Holds if hidden nodes should be included in the data flow graph. + * + * This feature should only be used for debugging or when the data flow graph + * is not visualized (for example in a `path-problem` query). + */ + predicate includeHiddenNodes() { none() } + + /** + * Holds if there is a partial data flow path from `source` to `node`. The + * approximate distance between `node` and the closest source is `dist` and + * is restricted to be less than or equal to `explorationLimit()`. This + * predicate completely disregards sink definitions. + * + * This predicate is intended for data-flow exploration and debugging and may + * perform poorly if the number of sources is too big and/or the exploration + * limit is set too high without using barriers. + * + * This predicate is disabled (has no results) by default. Override + * `explorationLimit()` with a suitable number to enable this predicate. + * + * To use this in a `path-problem` query, import the module `PartialPathGraph`. + */ + final predicate hasPartialFlow(PartialPathNode source, PartialPathNode node, int dist) { + partialFlow(source, node, this) and + dist = node.getSourceDistance() + } + + /** + * Holds if there is a partial data flow path from `node` to `sink`. The + * approximate distance between `node` and the closest sink is `dist` and + * is restricted to be less than or equal to `explorationLimit()`. This + * predicate completely disregards source definitions. + * + * This predicate is intended for data-flow exploration and debugging and may + * perform poorly if the number of sinks is too big and/or the exploration + * limit is set too high without using barriers. + * + * This predicate is disabled (has no results) by default. Override + * `explorationLimit()` with a suitable number to enable this predicate. + * + * To use this in a `path-problem` query, import the module `PartialPathGraph`. + * + * Note that reverse flow has slightly lower precision than the corresponding + * forward flow, as reverse flow disregards type pruning among other features. + */ + final predicate hasPartialFlowRev(PartialPathNode node, PartialPathNode sink, int dist) { + revPartialFlow(node, sink, this) and + dist = node.getSinkDistance() + } +} + +/** + * This class exists to prevent mutual recursion between the user-overridden + * member predicates of `Configuration` and the rest of the data-flow library. + * Good performance cannot be guaranteed in the presence of such recursion, so + * it should be replaced by using more than one copy of the data flow library. + */ +abstract private class ConfigurationRecursionPrevention extends Configuration { + bindingset[this] + ConfigurationRecursionPrevention() { any() } + + override predicate hasFlow(Node source, Node sink) { + strictcount(Node n | this.isSource(n)) < 0 + or + strictcount(Node n | this.isSource(n, _)) < 0 + or + strictcount(Node n | this.isSink(n)) < 0 + or + strictcount(Node n | this.isSink(n, _)) < 0 + or + strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, n2)) < 0 + or + strictcount(Node n1, Node n2 | this.isAdditionalFlowStep(n1, _, n2, _)) < 0 + or + super.hasFlow(source, sink) + } +} + +private newtype TNodeEx = + TNodeNormal(Node n) or + TNodeImplicitRead(Node n, boolean hasRead) { + any(Configuration c).allowImplicitRead(n, _) and hasRead = [false, true] + } + +private class NodeEx extends TNodeEx { + string toString() { + result = this.asNode().toString() + or + exists(Node n | this.isImplicitReadNode(n, _) | result = n.toString() + " [Ext]") + } + + Node asNode() { this = TNodeNormal(result) } + + predicate isImplicitReadNode(Node n, boolean hasRead) { this = TNodeImplicitRead(n, hasRead) } + + Node projectToNode() { this = TNodeNormal(result) or this = TNodeImplicitRead(result, _) } + + pragma[nomagic] + private DataFlowCallable getEnclosingCallable0() { + nodeEnclosingCallable(this.projectToNode(), result) + } + + pragma[inline] + DataFlowCallable getEnclosingCallable() { + pragma[only_bind_out](this).getEnclosingCallable0() = pragma[only_bind_into](result) + } + + pragma[nomagic] + private DataFlowType getDataFlowType0() { nodeDataFlowType(this.asNode(), result) } + + pragma[inline] + DataFlowType getDataFlowType() { + pragma[only_bind_out](this).getDataFlowType0() = pragma[only_bind_into](result) + } + + predicate hasLocationInfo( + string filepath, int startline, int startcolumn, int endline, int endcolumn + ) { + this.projectToNode().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn) + } +} + +private class ArgNodeEx extends NodeEx { + ArgNodeEx() { this.asNode() instanceof ArgNode } +} + +private class ParamNodeEx extends NodeEx { + ParamNodeEx() { this.asNode() instanceof ParamNode } + + predicate isParameterOf(DataFlowCallable c, ParameterPosition pos) { + this.asNode().(ParamNode).isParameterOf(c, pos) + } + + ParameterPosition getPosition() { this.isParameterOf(_, result) } +} + +private class RetNodeEx extends NodeEx { + RetNodeEx() { this.asNode() instanceof ReturnNodeExt } + + ReturnPosition getReturnPosition() { result = getReturnPosition(this.asNode()) } + + ReturnKindExt getKind() { result = this.asNode().(ReturnNodeExt).getKind() } +} + +private predicate inBarrier(NodeEx node, Configuration config) { + exists(Node n | + node.asNode() = n and + config.isBarrierIn(n) + | + config.isSource(n) or config.isSource(n, _) + ) +} + +private predicate outBarrier(NodeEx node, Configuration config) { + exists(Node n | + node.asNode() = n and + config.isBarrierOut(n) + | + config.isSink(n) or config.isSink(n, _) + ) +} + +/** A bridge class to access the deprecated `isBarrierGuard`. */ +private class BarrierGuardGuardedNodeBridge extends Unit { + abstract predicate guardedNode(Node n, Configuration config); + + abstract predicate guardedNode(Node n, FlowState state, Configuration config); +} + +private class BarrierGuardGuardedNode extends BarrierGuardGuardedNodeBridge { + deprecated override predicate guardedNode(Node n, Configuration config) { + exists(BarrierGuard g | + config.isBarrierGuard(g) and + n = g.getAGuardedNode() + ) + } + + deprecated override predicate guardedNode(Node n, FlowState state, Configuration config) { + exists(BarrierGuard g | + config.isBarrierGuard(g, state) and + n = g.getAGuardedNode() + ) + } +} + +pragma[nomagic] +private predicate fullBarrier(NodeEx node, Configuration config) { + exists(Node n | node.asNode() = n | + config.isBarrier(n) + or + config.isBarrierIn(n) and + not config.isSource(n) and + not config.isSource(n, _) + or + config.isBarrierOut(n) and + not config.isSink(n) and + not config.isSink(n, _) + or + any(BarrierGuardGuardedNodeBridge b).guardedNode(n, config) + ) +} + +pragma[nomagic] +private predicate stateBarrier(NodeEx node, FlowState state, Configuration config) { + exists(Node n | node.asNode() = n | + config.isBarrier(n, state) + or + any(BarrierGuardGuardedNodeBridge b).guardedNode(n, state, config) + ) +} + +pragma[nomagic] +private predicate sourceNode(NodeEx node, FlowState state, Configuration config) { + ( + config.isSource(node.asNode()) and state instanceof FlowStateEmpty + or + config.isSource(node.asNode(), state) + ) and + not fullBarrier(node, config) and + not stateBarrier(node, state, config) +} + +pragma[nomagic] +private predicate sinkNode(NodeEx node, FlowState state, Configuration config) { + ( + config.isSink(node.asNode()) and state instanceof FlowStateEmpty + or + config.isSink(node.asNode(), state) + ) and + not fullBarrier(node, config) and + not stateBarrier(node, state, config) +} + +/** Provides the relevant barriers for a step from `node1` to `node2`. */ +pragma[inline] +private predicate stepFilter(NodeEx node1, NodeEx node2, Configuration config) { + not outBarrier(node1, config) and + not inBarrier(node2, config) and + not fullBarrier(node1, config) and + not fullBarrier(node2, config) +} + +/** + * Holds if data can flow in one local step from `node1` to `node2`. + */ +private predicate localFlowStep(NodeEx node1, NodeEx node2, Configuration config) { + exists(Node n1, Node n2 | + node1.asNode() = n1 and + node2.asNode() = n2 and + simpleLocalFlowStepExt(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and + stepFilter(node1, node2, config) + ) + or + exists(Node n | + config.allowImplicitRead(n, _) and + node1.asNode() = n and + node2.isImplicitReadNode(n, false) and + not fullBarrier(node1, config) + ) +} + +/** + * Holds if the additional step from `node1` to `node2` does not jump between callables. + */ +private predicate additionalLocalFlowStep(NodeEx node1, NodeEx node2, Configuration config) { + exists(Node n1, Node n2 | + node1.asNode() = n1 and + node2.asNode() = n2 and + config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and + getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and + stepFilter(node1, node2, config) + ) + or + exists(Node n | + config.allowImplicitRead(n, _) and + node1.isImplicitReadNode(n, true) and + node2.asNode() = n and + not fullBarrier(node2, config) + ) +} + +private predicate additionalLocalStateStep( + NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config +) { + exists(Node n1, Node n2 | + node1.asNode() = n1 and + node2.asNode() = n2 and + config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and + getNodeEnclosingCallable(n1) = getNodeEnclosingCallable(n2) and + stepFilter(node1, node2, config) and + not stateBarrier(node1, s1, config) and + not stateBarrier(node2, s2, config) + ) +} + +/** + * Holds if data can flow from `node1` to `node2` in a way that discards call contexts. + */ +private predicate jumpStep(NodeEx node1, NodeEx node2, Configuration config) { + exists(Node n1, Node n2 | + node1.asNode() = n1 and + node2.asNode() = n2 and + jumpStepCached(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and + stepFilter(node1, node2, config) and + not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext + ) +} + +/** + * Holds if the additional step from `node1` to `node2` jumps between callables. + */ +private predicate additionalJumpStep(NodeEx node1, NodeEx node2, Configuration config) { + exists(Node n1, Node n2 | + node1.asNode() = n1 and + node2.asNode() = n2 and + config.isAdditionalFlowStep(pragma[only_bind_into](n1), pragma[only_bind_into](n2)) and + getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and + stepFilter(node1, node2, config) and + not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext + ) +} + +private predicate additionalJumpStateStep( + NodeEx node1, FlowState s1, NodeEx node2, FlowState s2, Configuration config +) { + exists(Node n1, Node n2 | + node1.asNode() = n1 and + node2.asNode() = n2 and + config.isAdditionalFlowStep(pragma[only_bind_into](n1), s1, pragma[only_bind_into](n2), s2) and + getNodeEnclosingCallable(n1) != getNodeEnclosingCallable(n2) and + stepFilter(node1, node2, config) and + not stateBarrier(node1, s1, config) and + not stateBarrier(node2, s2, config) and + not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext + ) +} + +pragma[nomagic] +private predicate readSet(NodeEx node1, ContentSet c, NodeEx node2, Configuration config) { + readSet(pragma[only_bind_into](node1.asNode()), c, pragma[only_bind_into](node2.asNode())) and + stepFilter(node1, node2, config) + or + exists(Node n | + node2.isImplicitReadNode(n, true) and + node1.isImplicitReadNode(n, _) and + config.allowImplicitRead(n, c) + ) +} + +// inline to reduce fan-out via `getAReadContent` +bindingset[c] +private predicate read(NodeEx node1, Content c, NodeEx node2, Configuration config) { + exists(ContentSet cs | + readSet(node1, cs, node2, config) and + pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent() + ) +} + +// inline to reduce fan-out via `getAReadContent` +bindingset[c] +private predicate clearsContentEx(NodeEx n, Content c) { + exists(ContentSet cs | + clearsContentCached(n.asNode(), cs) and + pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent() + ) +} + +// inline to reduce fan-out via `getAReadContent` +bindingset[c] +private predicate expectsContentEx(NodeEx n, Content c) { + exists(ContentSet cs | + expectsContentCached(n.asNode(), cs) and + pragma[only_bind_out](c) = pragma[only_bind_into](cs).getAReadContent() + ) +} + +pragma[nomagic] +private predicate notExpectsContent(NodeEx n) { not expectsContentCached(n.asNode(), _) } + +pragma[nomagic] +private predicate hasReadStep(Content c, Configuration config) { read(_, c, _, config) } + +pragma[nomagic] +private predicate store( + NodeEx node1, TypedContent tc, NodeEx node2, DataFlowType contentType, Configuration config +) { + store(pragma[only_bind_into](node1.asNode()), tc, pragma[only_bind_into](node2.asNode()), + contentType) and + hasReadStep(tc.getContent(), config) and + stepFilter(node1, node2, config) +} + +pragma[nomagic] +private predicate viableReturnPosOutEx(DataFlowCall call, ReturnPosition pos, NodeEx out) { + viableReturnPosOut(call, pos, out.asNode()) +} + +pragma[nomagic] +private predicate viableParamArgEx(DataFlowCall call, ParamNodeEx p, ArgNodeEx arg) { + viableParamArg(call, p.asNode(), arg.asNode()) +} + +/** + * Holds if field flow should be used for the given configuration. + */ +private predicate useFieldFlow(Configuration config) { config.fieldFlowBranchLimit() >= 1 } + +private predicate hasSourceCallCtx(Configuration config) { + exists(FlowFeature feature | feature = config.getAFeature() | + feature instanceof FeatureHasSourceCallContext or + feature instanceof FeatureEqualSourceSinkCallContext + ) +} + +private predicate hasSinkCallCtx(Configuration config) { + exists(FlowFeature feature | feature = config.getAFeature() | + feature instanceof FeatureHasSinkCallContext or + feature instanceof FeatureEqualSourceSinkCallContext + ) +} + +/** + * Holds if flow from `p` to a return node of kind `kind` is allowed. + * + * We don't expect a parameter to return stored in itself, unless + * explicitly allowed + */ +bindingset[p, kind] +private predicate parameterFlowThroughAllowed(ParamNodeEx p, ReturnKindExt kind) { + exists(ParameterPosition pos | p.isParameterOf(_, pos) | + not kind.(ParamUpdateReturnKind).getPosition() = pos + or + allowParameterReturnInSelfCached(p.asNode()) + ) +} + +private module Stage1 implements StageSig { + class Ap extends int { + // workaround for bad functionality-induced joins (happens when using `Unit`) + pragma[nomagic] + Ap() { this in [0 .. 1] and this < 1 } + } + + private class Cc = boolean; + + /* Begin: Stage 1 logic. */ + /** + * Holds if `node` is reachable from a source in the configuration `config`. + * + * The Boolean `cc` records whether the node is reached through an + * argument in a call. + */ + private predicate fwdFlow(NodeEx node, Cc cc, Configuration config) { + sourceNode(node, _, config) and + if hasSourceCallCtx(config) then cc = true else cc = false + or + exists(NodeEx mid | fwdFlow(mid, cc, config) | + localFlowStep(mid, node, config) or + additionalLocalFlowStep(mid, node, config) or + additionalLocalStateStep(mid, _, node, _, config) + ) + or + exists(NodeEx mid | fwdFlow(mid, _, config) and cc = false | + jumpStep(mid, node, config) or + additionalJumpStep(mid, node, config) or + additionalJumpStateStep(mid, _, node, _, config) + ) + or + // store + exists(NodeEx mid | + useFieldFlow(config) and + fwdFlow(mid, cc, config) and + store(mid, _, node, _, config) + ) + or + // read + exists(ContentSet c | + fwdFlowReadSet(c, node, cc, config) and + fwdFlowConsCandSet(c, _, config) + ) + or + // flow into a callable + exists(NodeEx arg | + fwdFlow(arg, _, config) and + viableParamArgEx(_, node, arg) and + cc = true and + not fullBarrier(node, config) + ) + or + // flow out of a callable + exists(DataFlowCall call | + fwdFlowOut(call, node, false, config) and + cc = false + or + fwdFlowOutFromArg(call, node, config) and + fwdFlowIsEntered(call, cc, config) + ) + } + + private predicate fwdFlow(NodeEx node, Configuration config) { fwdFlow(node, _, config) } + + pragma[nomagic] + private predicate fwdFlowReadSet(ContentSet c, NodeEx node, Cc cc, Configuration config) { + exists(NodeEx mid | + fwdFlow(mid, cc, config) and + readSet(mid, c, node, config) + ) + } + + /** + * Holds if `c` is the target of a store in the flow covered by `fwdFlow`. + */ + pragma[nomagic] + private predicate fwdFlowConsCand(Content c, Configuration config) { + exists(NodeEx mid, NodeEx node, TypedContent tc | + not fullBarrier(node, config) and + useFieldFlow(config) and + fwdFlow(mid, _, config) and + store(mid, tc, node, _, config) and + c = tc.getContent() + ) + } + + /** + * Holds if `cs` may be interpreted in a read as the target of some store + * into `c`, in the flow covered by `fwdFlow`. + */ + pragma[nomagic] + private predicate fwdFlowConsCandSet(ContentSet cs, Content c, Configuration config) { + fwdFlowConsCand(c, config) and + c = cs.getAReadContent() + } + + pragma[nomagic] + private predicate fwdFlowReturnPosition(ReturnPosition pos, Cc cc, Configuration config) { + exists(RetNodeEx ret | + fwdFlow(ret, cc, config) and + ret.getReturnPosition() = pos + ) + } + + pragma[nomagic] + private predicate fwdFlowOut(DataFlowCall call, NodeEx out, Cc cc, Configuration config) { + exists(ReturnPosition pos | + fwdFlowReturnPosition(pos, cc, config) and + viableReturnPosOutEx(call, pos, out) and + not fullBarrier(out, config) + ) + } + + pragma[nomagic] + private predicate fwdFlowOutFromArg(DataFlowCall call, NodeEx out, Configuration config) { + fwdFlowOut(call, out, true, config) + } + + /** + * Holds if an argument to `call` is reached in the flow covered by `fwdFlow`. + */ + pragma[nomagic] + private predicate fwdFlowIsEntered(DataFlowCall call, Cc cc, Configuration config) { + exists(ArgNodeEx arg | + fwdFlow(arg, cc, config) and + viableParamArgEx(call, _, arg) + ) + } + + private predicate stateStepFwd(FlowState state1, FlowState state2, Configuration config) { + exists(NodeEx node1 | + additionalLocalStateStep(node1, state1, _, state2, config) or + additionalJumpStateStep(node1, state1, _, state2, config) + | + fwdFlow(node1, config) + ) + } + + private predicate fwdFlowState(FlowState state, Configuration config) { + sourceNode(_, state, config) + or + exists(FlowState state0 | + fwdFlowState(state0, config) and + stateStepFwd(state0, state, config) + ) + } + + /** + * Holds if `node` is part of a path from a source to a sink in the + * configuration `config`. + * + * The Boolean `toReturn` records whether the node must be returned from + * the enclosing callable in order to reach a sink. + */ + pragma[nomagic] + private predicate revFlow(NodeEx node, boolean toReturn, Configuration config) { + revFlow0(node, toReturn, config) and + fwdFlow(node, config) + } + + pragma[nomagic] + private predicate revFlow0(NodeEx node, boolean toReturn, Configuration config) { + exists(FlowState state | + fwdFlow(node, pragma[only_bind_into](config)) and + sinkNode(node, state, config) and + fwdFlowState(state, pragma[only_bind_into](config)) and + if hasSinkCallCtx(config) then toReturn = true else toReturn = false + ) + or + exists(NodeEx mid | revFlow(mid, toReturn, config) | + localFlowStep(node, mid, config) or + additionalLocalFlowStep(node, mid, config) or + additionalLocalStateStep(node, _, mid, _, config) + ) + or + exists(NodeEx mid | revFlow(mid, _, config) and toReturn = false | + jumpStep(node, mid, config) or + additionalJumpStep(node, mid, config) or + additionalJumpStateStep(node, _, mid, _, config) + ) + or + // store + exists(Content c | + revFlowStore(c, node, toReturn, config) and + revFlowConsCand(c, config) + ) + or + // read + exists(NodeEx mid, ContentSet c | + readSet(node, c, mid, config) and + fwdFlowConsCandSet(c, _, pragma[only_bind_into](config)) and + revFlow(mid, toReturn, pragma[only_bind_into](config)) + ) + or + // flow into a callable + exists(DataFlowCall call | + revFlowIn(call, node, false, config) and + toReturn = false + or + revFlowInToReturn(call, node, config) and + revFlowIsReturned(call, toReturn, config) + ) + or + // flow out of a callable + exists(ReturnPosition pos | + revFlowOut(pos, config) and + node.(RetNodeEx).getReturnPosition() = pos and + toReturn = true + ) + } + + /** + * Holds if `c` is the target of a read in the flow covered by `revFlow`. + */ + pragma[nomagic] + private predicate revFlowConsCand(Content c, Configuration config) { + exists(NodeEx mid, NodeEx node, ContentSet cs | + fwdFlow(node, pragma[only_bind_into](config)) and + readSet(node, cs, mid, config) and + fwdFlowConsCandSet(cs, c, pragma[only_bind_into](config)) and + revFlow(pragma[only_bind_into](mid), _, pragma[only_bind_into](config)) + ) + } + + pragma[nomagic] + private predicate revFlowStore(Content c, NodeEx node, boolean toReturn, Configuration config) { + exists(NodeEx mid, TypedContent tc | + revFlow(mid, toReturn, pragma[only_bind_into](config)) and + fwdFlowConsCand(c, pragma[only_bind_into](config)) and + store(node, tc, mid, _, config) and + c = tc.getContent() + ) + } + + /** + * Holds if `c` is the target of both a read and a store in the flow covered + * by `revFlow`. + */ + pragma[nomagic] + additional predicate revFlowIsReadAndStored(Content c, Configuration conf) { + revFlowConsCand(c, conf) and + revFlowStore(c, _, _, conf) + } + + pragma[nomagic] + additional predicate viableReturnPosOutNodeCandFwd1( + DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config + ) { + fwdFlowReturnPosition(pos, _, config) and + viableReturnPosOutEx(call, pos, out) + } + + pragma[nomagic] + private predicate revFlowOut(ReturnPosition pos, Configuration config) { + exists(NodeEx out | + revFlow(out, _, config) and + viableReturnPosOutNodeCandFwd1(_, pos, out, config) + ) + } + + pragma[nomagic] + additional predicate viableParamArgNodeCandFwd1( + DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config + ) { + viableParamArgEx(call, p, arg) and + fwdFlow(arg, config) + } + + pragma[nomagic] + private predicate revFlowIn( + DataFlowCall call, ArgNodeEx arg, boolean toReturn, Configuration config + ) { + exists(ParamNodeEx p | + revFlow(p, toReturn, config) and + viableParamArgNodeCandFwd1(call, p, arg, config) + ) + } + + pragma[nomagic] + private predicate revFlowInToReturn(DataFlowCall call, ArgNodeEx arg, Configuration config) { + revFlowIn(call, arg, true, config) + } + + /** + * Holds if an output from `call` is reached in the flow covered by `revFlow` + * and data might flow through the target callable resulting in reverse flow + * reaching an argument of `call`. + */ + pragma[nomagic] + private predicate revFlowIsReturned(DataFlowCall call, boolean toReturn, Configuration config) { + exists(NodeEx out | + revFlow(out, toReturn, config) and + fwdFlowOutFromArg(call, out, config) + ) + } + + private predicate stateStepRev(FlowState state1, FlowState state2, Configuration config) { + exists(NodeEx node1, NodeEx node2 | + additionalLocalStateStep(node1, state1, node2, state2, config) or + additionalJumpStateStep(node1, state1, node2, state2, config) + | + revFlow(node1, _, pragma[only_bind_into](config)) and + revFlow(node2, _, pragma[only_bind_into](config)) and + fwdFlowState(state1, pragma[only_bind_into](config)) and + fwdFlowState(state2, pragma[only_bind_into](config)) + ) + } + + additional predicate revFlowState(FlowState state, Configuration config) { + exists(NodeEx node | + sinkNode(node, state, config) and + revFlow(node, _, pragma[only_bind_into](config)) and + fwdFlowState(state, pragma[only_bind_into](config)) + ) + or + exists(FlowState state0 | + revFlowState(state0, config) and + stateStepRev(state, state0, config) + ) + } + + pragma[nomagic] + predicate storeStepCand( + NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType, + Configuration config + ) { + exists(Content c | + revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and + revFlow(node2, pragma[only_bind_into](config)) and + store(node1, tc, node2, contentType, config) and + c = tc.getContent() and + exists(ap1) + ) + } + + pragma[nomagic] + predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config) { + revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and + read(n1, c, n2, pragma[only_bind_into](config)) and + revFlow(n2, pragma[only_bind_into](config)) + } + + pragma[nomagic] + predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, config) } + + pragma[nomagic] + predicate revFlowAp(NodeEx node, Ap ap, Configuration config) { + revFlow(node, config) and + exists(ap) + } + + bindingset[node, state, config] + predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) { + revFlow(node, _, pragma[only_bind_into](config)) and + exists(state) and + exists(ap) + } + + private predicate throughFlowNodeCand(NodeEx node, Configuration config) { + revFlow(node, true, config) and + fwdFlow(node, true, config) and + not inBarrier(node, config) and + not outBarrier(node, config) + } + + /** Holds if flow may return from `callable`. */ + pragma[nomagic] + private predicate returnFlowCallableNodeCand( + DataFlowCallable callable, ReturnKindExt kind, Configuration config + ) { + exists(RetNodeEx ret | + throughFlowNodeCand(ret, config) and + callable = ret.getEnclosingCallable() and + kind = ret.getKind() + ) + } + + /** + * Holds if flow may enter through `p` and reach a return node making `p` a + * candidate for the origin of a summary. + */ + pragma[nomagic] + predicate parameterMayFlowThrough(ParamNodeEx p, Ap ap, Configuration config) { + exists(DataFlowCallable c, ReturnKindExt kind | + throughFlowNodeCand(p, config) and + returnFlowCallableNodeCand(c, kind, config) and + p.getEnclosingCallable() = c and + exists(ap) and + parameterFlowThroughAllowed(p, kind) + ) + } + + pragma[nomagic] + predicate returnMayFlowThrough( + RetNodeEx ret, Ap argAp, Ap ap, ReturnKindExt kind, Configuration config + ) { + throughFlowNodeCand(ret, config) and + kind = ret.getKind() and + exists(argAp) and + exists(ap) + } + + pragma[nomagic] + predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) { + exists(ArgNodeEx arg, boolean toReturn | + revFlow(arg, toReturn, config) and + revFlowInToReturn(call, arg, config) and + revFlowIsReturned(call, toReturn, config) + ) + } + + additional predicate stats( + boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config + ) { + fwd = true and + nodes = count(NodeEx node | fwdFlow(node, config)) and + fields = count(Content f0 | fwdFlowConsCand(f0, config)) and + conscand = -1 and + states = count(FlowState state | fwdFlowState(state, config)) and + tuples = count(NodeEx n, boolean b | fwdFlow(n, b, config)) + or + fwd = false and + nodes = count(NodeEx node | revFlow(node, _, config)) and + fields = count(Content f0 | revFlowConsCand(f0, config)) and + conscand = -1 and + states = count(FlowState state | revFlowState(state, config)) and + tuples = count(NodeEx n, boolean b | revFlow(n, b, config)) + } + /* End: Stage 1 logic. */ +} + +pragma[noinline] +private predicate localFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) { + Stage1::revFlow(node2, config) and + localFlowStep(node1, node2, config) +} + +pragma[noinline] +private predicate additionalLocalFlowStepNodeCand1(NodeEx node1, NodeEx node2, Configuration config) { + Stage1::revFlow(node2, config) and + additionalLocalFlowStep(node1, node2, config) +} + +pragma[nomagic] +private predicate viableReturnPosOutNodeCand1( + DataFlowCall call, ReturnPosition pos, NodeEx out, Configuration config +) { + Stage1::revFlow(out, config) and + Stage1::viableReturnPosOutNodeCandFwd1(call, pos, out, config) +} + +/** + * Holds if data can flow out of `call` from `ret` to `out`, either + * through a `ReturnNode` or through an argument that has been mutated, and + * that this step is part of a path from a source to a sink. + */ +pragma[nomagic] +private predicate flowOutOfCallNodeCand1( + DataFlowCall call, RetNodeEx ret, ReturnKindExt kind, NodeEx out, Configuration config +) { + exists(ReturnPosition pos | + viableReturnPosOutNodeCand1(call, pos, out, config) and + pos = ret.getReturnPosition() and + kind = pos.getKind() and + Stage1::revFlow(ret, config) and + not outBarrier(ret, config) and + not inBarrier(out, config) + ) +} + +pragma[nomagic] +private predicate viableParamArgNodeCand1( + DataFlowCall call, ParamNodeEx p, ArgNodeEx arg, Configuration config +) { + Stage1::viableParamArgNodeCandFwd1(call, p, arg, config) and + Stage1::revFlow(arg, config) +} + +/** + * Holds if data can flow into `call` and that this step is part of a + * path from a source to a sink. + */ +pragma[nomagic] +private predicate flowIntoCallNodeCand1( + DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, Configuration config +) { + viableParamArgNodeCand1(call, p, arg, config) and + Stage1::revFlow(p, config) and + not outBarrier(arg, config) and + not inBarrier(p, config) +} + +/** + * Gets the amount of forward branching on the origin of a cross-call path + * edge in the graph of paths between sources and sinks that ignores call + * contexts. + */ +pragma[nomagic] +private int branch(NodeEx n1, Configuration conf) { + result = + strictcount(NodeEx n | + flowOutOfCallNodeCand1(_, n1, _, n, conf) or flowIntoCallNodeCand1(_, n1, n, conf) + ) +} + +/** + * Gets the amount of backward branching on the target of a cross-call path + * edge in the graph of paths between sources and sinks that ignores call + * contexts. + */ +pragma[nomagic] +private int join(NodeEx n2, Configuration conf) { + result = + strictcount(NodeEx n | + flowOutOfCallNodeCand1(_, n, _, n2, conf) or flowIntoCallNodeCand1(_, n, n2, conf) + ) +} + +/** + * Holds if data can flow out of `call` from `ret` to `out`, either + * through a `ReturnNode` or through an argument that has been mutated, and + * that this step is part of a path from a source to a sink. The + * `allowsFieldFlow` flag indicates whether the branching is within the limit + * specified by the configuration. + */ +pragma[nomagic] +private predicate flowOutOfCallNodeCand1( + DataFlowCall call, RetNodeEx ret, ReturnKindExt kind, NodeEx out, boolean allowsFieldFlow, + Configuration config +) { + flowOutOfCallNodeCand1(call, ret, kind, out, pragma[only_bind_into](config)) and + exists(int b, int j | + b = branch(ret, pragma[only_bind_into](config)) and + j = join(out, pragma[only_bind_into](config)) and + if b.minimum(j) <= config.fieldFlowBranchLimit() + then allowsFieldFlow = true + else allowsFieldFlow = false + ) +} + +/** + * Holds if data can flow into `call` and that this step is part of a + * path from a source to a sink. The `allowsFieldFlow` flag indicates whether + * the branching is within the limit specified by the configuration. + */ +pragma[nomagic] +private predicate flowIntoCallNodeCand1( + DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config +) { + flowIntoCallNodeCand1(call, arg, p, pragma[only_bind_into](config)) and + exists(int b, int j | + b = branch(arg, pragma[only_bind_into](config)) and + j = join(p, pragma[only_bind_into](config)) and + if b.minimum(j) <= config.fieldFlowBranchLimit() + then allowsFieldFlow = true + else allowsFieldFlow = false + ) +} + +private signature module StageSig { + class Ap; + + predicate revFlow(NodeEx node, Configuration config); + + predicate revFlowAp(NodeEx node, Ap ap, Configuration config); + + bindingset[node, state, config] + predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config); + + predicate callMayFlowThroughRev(DataFlowCall call, Configuration config); + + predicate parameterMayFlowThrough(ParamNodeEx p, Ap ap, Configuration config); + + predicate returnMayFlowThrough( + RetNodeEx ret, Ap argAp, Ap ap, ReturnKindExt kind, Configuration config + ); + + predicate storeStepCand( + NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType, + Configuration config + ); + + predicate readStepCand(NodeEx n1, Content c, NodeEx n2, Configuration config); +} + +private module MkStage { + class ApApprox = PrevStage::Ap; + + signature module StageParam { + class Ap; + + class ApNil extends Ap; + + bindingset[result, ap] + ApApprox getApprox(Ap ap); + + ApNil getApNil(NodeEx node); + + bindingset[tc, tail] + Ap apCons(TypedContent tc, Ap tail); + + Content getHeadContent(Ap ap); + + class ApOption; + + ApOption apNone(); + + ApOption apSome(Ap ap); + + class Cc; + + class CcCall extends Cc; + + // TODO: member predicate on CcCall + predicate matchesCall(CcCall cc, DataFlowCall call); + + class CcNoCall extends Cc; + + Cc ccNone(); + + CcCall ccSomeCall(); + + class LocalCc; + + bindingset[call, c, outercc] + CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc); + + bindingset[call, c, innercc] + CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc); + + bindingset[node, cc] + LocalCc getLocalCc(NodeEx node, Cc cc); + + bindingset[node1, state1, config] + bindingset[node2, state2, config] + predicate localStep( + NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue, + ApNil ap, Configuration config, LocalCc lcc + ); + + predicate flowOutOfCall( + DataFlowCall call, RetNodeEx ret, ReturnKindExt kind, NodeEx out, boolean allowsFieldFlow, + Configuration config + ); + + predicate flowIntoCall( + DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Configuration config + ); + + bindingset[node, state, ap, config] + predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config); + + bindingset[ap, contentType] + predicate typecheckStore(Ap ap, DataFlowType contentType); + } + + module Stage implements StageSig { + import Param + + /* Begin: Stage logic. */ + // use an alias as a workaround for bad functionality-induced joins + pragma[nomagic] + private predicate revFlowApAlias(NodeEx node, ApApprox apa, Configuration config) { + PrevStage::revFlowAp(node, apa, config) + } + + pragma[nomagic] + private predicate flowIntoCallApa( + DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, ApApprox apa, + Configuration config + ) { + flowIntoCall(call, arg, p, allowsFieldFlow, config) and + PrevStage::revFlowAp(p, pragma[only_bind_into](apa), pragma[only_bind_into](config)) and + revFlowApAlias(arg, pragma[only_bind_into](apa), pragma[only_bind_into](config)) + } + + pragma[nomagic] + private predicate flowOutOfCallApa( + DataFlowCall call, RetNodeEx ret, ReturnKindExt kind, NodeEx out, boolean allowsFieldFlow, + ApApprox apa, Configuration config + ) { + flowOutOfCall(call, ret, kind, out, allowsFieldFlow, config) and + PrevStage::revFlowAp(out, pragma[only_bind_into](apa), pragma[only_bind_into](config)) and + revFlowApAlias(ret, pragma[only_bind_into](apa), pragma[only_bind_into](config)) + } + + pragma[nomagic] + private predicate flowThroughOutOfCall( + DataFlowCall call, CcCall ccc, RetNodeEx ret, NodeEx out, boolean allowsFieldFlow, + ApApprox argApa, ApApprox apa, Configuration config + ) { + exists(ReturnKindExt kind | + flowOutOfCallApa(call, ret, kind, out, allowsFieldFlow, apa, pragma[only_bind_into](config)) and + PrevStage::callMayFlowThroughRev(call, pragma[only_bind_into](config)) and + PrevStage::returnMayFlowThrough(ret, argApa, apa, kind, pragma[only_bind_into](config)) and + matchesCall(ccc, call) + ) + } + + /** + * Holds if `node` is reachable with access path `ap` from a source in the + * configuration `config`. + * + * The call context `cc` records whether the node is reached through an + * argument in a call, and if so, `summaryCtx` and `argAp` record the + * corresponding parameter position and access path of that argument, respectively. + */ + pragma[nomagic] + additional predicate fwdFlow( + NodeEx node, FlowState state, Cc cc, ParamNodeOption summaryCtx, ApOption argAp, Ap ap, + ApApprox apa, Configuration config + ) { + fwdFlow0(node, state, cc, summaryCtx, argAp, ap, apa, config) and + PrevStage::revFlow(node, state, apa, config) and + filter(node, state, ap, config) + } + + pragma[inline] + additional predicate fwdFlow( + NodeEx node, FlowState state, Cc cc, ParamNodeOption summaryCtx, ApOption argAp, Ap ap, + Configuration config + ) { + fwdFlow(node, state, cc, summaryCtx, argAp, ap, _, config) + } + + pragma[nomagic] + private predicate fwdFlow0( + NodeEx node, FlowState state, Cc cc, ParamNodeOption summaryCtx, ApOption argAp, Ap ap, + ApApprox apa, Configuration config + ) { + sourceNode(node, state, config) and + (if hasSourceCallCtx(config) then cc = ccSomeCall() else cc = ccNone()) and + argAp = apNone() and + summaryCtx = TParamNodeNone() and + ap = getApNil(node) and + apa = getApprox(ap) + or + exists(NodeEx mid, FlowState state0, Ap ap0, ApApprox apa0, LocalCc localCc | + fwdFlow(mid, state0, cc, summaryCtx, argAp, ap0, apa0, config) and + localCc = getLocalCc(mid, cc) + | + localStep(mid, state0, node, state, true, _, config, localCc) and + ap = ap0 and + apa = apa0 + or + localStep(mid, state0, node, state, false, ap, config, localCc) and + ap0 instanceof ApNil and + apa = getApprox(ap) + ) + or + exists(NodeEx mid | + fwdFlow(mid, pragma[only_bind_into](state), _, _, _, ap, apa, pragma[only_bind_into](config)) and + jumpStep(mid, node, config) and + cc = ccNone() and + summaryCtx = TParamNodeNone() and + argAp = apNone() + ) + or + exists(NodeEx mid, ApNil nil | + fwdFlow(mid, state, _, _, _, nil, pragma[only_bind_into](config)) and + additionalJumpStep(mid, node, config) and + cc = ccNone() and + summaryCtx = TParamNodeNone() and + argAp = apNone() and + ap = getApNil(node) and + apa = getApprox(ap) + ) + or + exists(NodeEx mid, FlowState state0, ApNil nil | + fwdFlow(mid, state0, _, _, _, nil, pragma[only_bind_into](config)) and + additionalJumpStateStep(mid, state0, node, state, config) and + cc = ccNone() and + summaryCtx = TParamNodeNone() and + argAp = apNone() and + ap = getApNil(node) and + apa = getApprox(ap) + ) + or + // store + exists(TypedContent tc, Ap ap0 | + fwdFlowStore(_, ap0, tc, node, state, cc, summaryCtx, argAp, config) and + ap = apCons(tc, ap0) and + apa = getApprox(ap) + ) + or + // read + exists(Ap ap0, Content c | + fwdFlowRead(ap0, c, _, node, state, cc, summaryCtx, argAp, config) and + fwdFlowConsCand(ap0, c, ap, config) and + apa = getApprox(ap) + ) + or + // flow into a callable + fwdFlowIn(_, node, state, _, cc, _, _, ap, apa, config) and + if PrevStage::parameterMayFlowThrough(node, apa, config) + then ( + summaryCtx = TParamNodeSome(node.asNode()) and + argAp = apSome(ap) + ) else ( + summaryCtx = TParamNodeNone() and argAp = apNone() + ) + or + // flow out of a callable + exists( + DataFlowCall call, RetNodeEx ret, boolean allowsFieldFlow, CcNoCall innercc, + DataFlowCallable inner + | + fwdFlow(ret, state, innercc, summaryCtx, argAp, ap, apa, config) and + flowOutOfCallApa(call, ret, _, node, allowsFieldFlow, apa, config) and + inner = ret.getEnclosingCallable() and + cc = getCallContextReturn(inner, call, innercc) and + if allowsFieldFlow = false then ap instanceof ApNil else any() + ) + or + // flow through a callable + exists( + DataFlowCall call, CcCall ccc, RetNodeEx ret, boolean allowsFieldFlow, ApApprox innerArgApa + | + fwdFlowThrough(call, cc, state, ccc, summaryCtx, argAp, ap, apa, ret, innerArgApa, config) and + flowThroughOutOfCall(call, ccc, ret, node, allowsFieldFlow, innerArgApa, apa, config) and + if allowsFieldFlow = false then ap instanceof ApNil else any() + ) + } + + pragma[nomagic] + private predicate fwdFlowStore( + NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, FlowState state, Cc cc, + ParamNodeOption summaryCtx, ApOption argAp, Configuration config + ) { + exists(DataFlowType contentType, ApApprox apa1 | + fwdFlow(node1, state, cc, summaryCtx, argAp, ap1, apa1, config) and + PrevStage::storeStepCand(node1, apa1, tc, node2, contentType, config) and + typecheckStore(ap1, contentType) + ) + } + + /** + * Holds if forward flow with access path `tail` reaches a store of `c` + * resulting in access path `cons`. + */ + pragma[nomagic] + private predicate fwdFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) { + exists(TypedContent tc | + fwdFlowStore(_, tail, tc, _, _, _, _, _, config) and + tc.getContent() = c and + cons = apCons(tc, tail) + ) + } + + private class ApNonNil instanceof Ap { + pragma[nomagic] + ApNonNil() { not this instanceof ApNil } + + string toString() { result = "" } + } + + pragma[nomagic] + private predicate fwdFlowRead0( + NodeEx node1, FlowState state, Cc cc, ParamNodeOption summaryCtx, ApOption argAp, ApNonNil ap, + Configuration config + ) { + fwdFlow(node1, state, cc, summaryCtx, argAp, ap, config) and + PrevStage::readStepCand(node1, _, _, config) + } + + pragma[nomagic] + private predicate fwdFlowRead( + Ap ap, Content c, NodeEx node1, NodeEx node2, FlowState state, Cc cc, + ParamNodeOption summaryCtx, ApOption argAp, Configuration config + ) { + fwdFlowRead0(node1, state, cc, summaryCtx, argAp, ap, config) and + PrevStage::readStepCand(node1, c, node2, config) and + getHeadContent(ap) = c + } + + pragma[nomagic] + private predicate fwdFlowIn( + DataFlowCall call, ParamNodeEx p, FlowState state, Cc outercc, CcCall innercc, + ParamNodeOption summaryCtx, ApOption argAp, Ap ap, ApApprox apa, Configuration config + ) { + exists(ArgNodeEx arg, boolean allowsFieldFlow | + fwdFlow(arg, state, outercc, summaryCtx, argAp, ap, apa, config) and + flowIntoCallApa(call, arg, p, allowsFieldFlow, apa, config) and + innercc = getCallContextCall(call, p.getEnclosingCallable(), outercc) and + if allowsFieldFlow = false then ap instanceof ApNil else any() + ) + } + + pragma[nomagic] + private predicate fwdFlowRetFromArg( + RetNodeEx ret, FlowState state, CcCall ccc, ParamNodeEx summaryCtx, Ap argAp, ApApprox argApa, + Ap ap, ApApprox apa, Configuration config + ) { + exists(ReturnKindExt kind | + fwdFlow(pragma[only_bind_into](ret), state, ccc, + TParamNodeSome(pragma[only_bind_into](summaryCtx.asNode())), + pragma[only_bind_into](apSome(argAp)), ap, pragma[only_bind_into](apa), + pragma[only_bind_into](config)) and + kind = ret.getKind() and + parameterFlowThroughAllowed(summaryCtx, kind) and + argApa = getApprox(argAp) and + PrevStage::returnMayFlowThrough(ret, argApa, apa, kind, pragma[only_bind_into](config)) + ) + } + + pragma[inline] + private predicate fwdFlowThrough0( + DataFlowCall call, Cc cc, FlowState state, CcCall ccc, ParamNodeOption summaryCtx, + ApOption argAp, Ap ap, ApApprox apa, RetNodeEx ret, ParamNodeEx innerSummaryCtx, + Ap innerArgAp, ApApprox innerArgApa, Configuration config + ) { + fwdFlowRetFromArg(ret, state, ccc, innerSummaryCtx, innerArgAp, innerArgApa, ap, apa, config) and + fwdFlowIsEntered(call, cc, ccc, summaryCtx, argAp, innerSummaryCtx, innerArgAp, config) + } + + pragma[nomagic] + private predicate fwdFlowThrough( + DataFlowCall call, Cc cc, FlowState state, CcCall ccc, ParamNodeOption summaryCtx, + ApOption argAp, Ap ap, ApApprox apa, RetNodeEx ret, ApApprox innerArgApa, Configuration config + ) { + fwdFlowThrough0(call, cc, state, ccc, summaryCtx, argAp, ap, apa, ret, _, _, innerArgApa, + config) + } + + /** + * Holds if an argument to `call` is reached in the flow covered by `fwdFlow` + * and data might flow through the target callable and back out at `call`. + */ + pragma[nomagic] + private predicate fwdFlowIsEntered( + DataFlowCall call, Cc cc, CcCall innerCc, ParamNodeOption summaryCtx, ApOption argAp, + ParamNodeEx p, Ap ap, Configuration config + ) { + exists(ApApprox apa | + fwdFlowIn(call, pragma[only_bind_into](p), _, cc, innerCc, summaryCtx, argAp, ap, + pragma[only_bind_into](apa), pragma[only_bind_into](config)) and + PrevStage::parameterMayFlowThrough(p, apa, config) and + PrevStage::callMayFlowThroughRev(call, pragma[only_bind_into](config)) + ) + } + + pragma[nomagic] + private predicate storeStepFwd( + NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, Ap ap2, Configuration config + ) { + fwdFlowStore(node1, ap1, tc, node2, _, _, _, _, config) and + ap2 = apCons(tc, ap1) and + fwdFlowRead(ap2, tc.getContent(), _, _, _, _, _, _, config) + } + + private predicate readStepFwd( + NodeEx n1, Ap ap1, Content c, NodeEx n2, Ap ap2, Configuration config + ) { + fwdFlowRead(ap1, c, n1, n2, _, _, _, _, config) and + fwdFlowConsCand(ap1, c, ap2, config) + } + + pragma[nomagic] + private predicate returnFlowsThrough0( + DataFlowCall call, FlowState state, CcCall ccc, Ap ap, ApApprox apa, RetNodeEx ret, + ParamNodeEx innerSummaryCtx, Ap innerArgAp, ApApprox innerArgApa, Configuration config + ) { + fwdFlowThrough0(call, _, state, ccc, _, _, ap, apa, ret, innerSummaryCtx, innerArgAp, + innerArgApa, config) + } + + pragma[nomagic] + private predicate returnFlowsThrough( + RetNodeEx ret, ReturnPosition pos, FlowState state, CcCall ccc, ParamNodeEx p, Ap argAp, + Ap ap, Configuration config + ) { + exists(DataFlowCall call, ApApprox apa, boolean allowsFieldFlow, ApApprox innerArgApa | + returnFlowsThrough0(call, state, ccc, ap, apa, ret, p, argAp, innerArgApa, config) and + flowThroughOutOfCall(call, ccc, ret, _, allowsFieldFlow, innerArgApa, apa, config) and + pos = ret.getReturnPosition() and + if allowsFieldFlow = false then ap instanceof ApNil else any() + ) + } + + pragma[nomagic] + private predicate flowThroughIntoCall( + DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Ap argAp, Ap ap, + Configuration config + ) { + exists(ApApprox argApa | + flowIntoCallApa(call, pragma[only_bind_into](arg), pragma[only_bind_into](p), + allowsFieldFlow, argApa, pragma[only_bind_into](config)) and + fwdFlow(arg, _, _, _, _, pragma[only_bind_into](argAp), argApa, + pragma[only_bind_into](config)) and + returnFlowsThrough(_, _, _, _, p, pragma[only_bind_into](argAp), ap, + pragma[only_bind_into](config)) and + if allowsFieldFlow = false then argAp instanceof ApNil else any() + ) + } + + pragma[nomagic] + private predicate flowIntoCallAp( + DataFlowCall call, ArgNodeEx arg, ParamNodeEx p, boolean allowsFieldFlow, Ap ap, + Configuration config + ) { + exists(ApApprox apa | + flowIntoCallApa(call, arg, p, allowsFieldFlow, apa, config) and + fwdFlow(arg, _, _, _, _, ap, apa, config) + ) + } + + pragma[nomagic] + private predicate flowOutOfCallAp( + DataFlowCall call, RetNodeEx ret, ReturnPosition pos, NodeEx out, boolean allowsFieldFlow, + Ap ap, Configuration config + ) { + exists(ApApprox apa | + flowOutOfCallApa(call, ret, _, out, allowsFieldFlow, apa, config) and + fwdFlow(ret, _, _, _, _, ap, apa, config) and + pos = ret.getReturnPosition() + ) + } + + /** + * Holds if `node` with access path `ap` is part of a path from a source to a + * sink in the configuration `config`. + * + * The parameter `returnCtx` records whether (and how) the node must be returned + * from the enclosing callable in order to reach a sink, and if so, `returnAp` + * records the access path of the returned value. + */ + pragma[nomagic] + additional predicate revFlow( + NodeEx node, FlowState state, ReturnCtx returnCtx, ApOption returnAp, Ap ap, + Configuration config + ) { + revFlow0(node, state, returnCtx, returnAp, ap, config) and + fwdFlow(node, state, _, _, _, ap, config) + } + + pragma[nomagic] + private predicate revFlow0( + NodeEx node, FlowState state, ReturnCtx returnCtx, ApOption returnAp, Ap ap, + Configuration config + ) { + fwdFlow(node, state, _, _, _, ap, config) and + sinkNode(node, state, config) and + ( + if hasSinkCallCtx(config) + then returnCtx = TReturnCtxNoFlowThrough() + else returnCtx = TReturnCtxNone() + ) and + returnAp = apNone() and + ap instanceof ApNil + or + exists(NodeEx mid, FlowState state0 | + localStep(node, state, mid, state0, true, _, config, _) and + revFlow(mid, state0, returnCtx, returnAp, ap, config) + ) + or + exists(NodeEx mid, FlowState state0, ApNil nil | + fwdFlow(node, pragma[only_bind_into](state), _, _, _, ap, pragma[only_bind_into](config)) and + localStep(node, pragma[only_bind_into](state), mid, state0, false, _, config, _) and + revFlow(mid, state0, returnCtx, returnAp, nil, pragma[only_bind_into](config)) and + ap instanceof ApNil + ) + or + exists(NodeEx mid | + jumpStep(node, mid, config) and + revFlow(mid, state, _, _, ap, config) and + returnCtx = TReturnCtxNone() and + returnAp = apNone() + ) + or + exists(NodeEx mid, ApNil nil | + fwdFlow(node, _, _, _, _, ap, pragma[only_bind_into](config)) and + additionalJumpStep(node, mid, config) and + revFlow(pragma[only_bind_into](mid), state, _, _, nil, pragma[only_bind_into](config)) and + returnCtx = TReturnCtxNone() and + returnAp = apNone() and + ap instanceof ApNil + ) + or + exists(NodeEx mid, FlowState state0, ApNil nil | + fwdFlow(node, _, _, _, _, ap, pragma[only_bind_into](config)) and + additionalJumpStateStep(node, state, mid, state0, config) and + revFlow(pragma[only_bind_into](mid), pragma[only_bind_into](state0), _, _, nil, + pragma[only_bind_into](config)) and + returnCtx = TReturnCtxNone() and + returnAp = apNone() and + ap instanceof ApNil + ) + or + // store + exists(Ap ap0, Content c | + revFlowStore(ap0, c, ap, node, state, _, _, returnCtx, returnAp, config) and + revFlowConsCand(ap0, c, ap, config) + ) + or + // read + exists(NodeEx mid, Ap ap0 | + revFlow(mid, state, returnCtx, returnAp, ap0, config) and + readStepFwd(node, ap, _, mid, ap0, config) + ) + or + // flow into a callable + exists(ParamNodeEx p, boolean allowsFieldFlow | + revFlow(p, state, TReturnCtxNone(), returnAp, ap, config) and + flowIntoCallAp(_, node, p, allowsFieldFlow, ap, config) and + (if allowsFieldFlow = false then ap instanceof ApNil else any()) and + returnCtx = TReturnCtxNone() + ) + or + // flow through a callable + exists(DataFlowCall call, ParamNodeEx p, Ap innerReturnAp | + revFlowThrough(call, returnCtx, p, state, _, returnAp, ap, innerReturnAp, config) and + flowThroughIntoCall(call, node, p, _, ap, innerReturnAp, config) + ) + or + // flow out of a callable + exists(ReturnPosition pos | + revFlowOut(_, node, pos, state, _, _, ap, config) and + if returnFlowsThrough(node, pos, state, _, _, _, ap, config) + then ( + returnCtx = TReturnCtxMaybeFlowThrough(pos) and + returnAp = apSome(ap) + ) else ( + returnCtx = TReturnCtxNoFlowThrough() and returnAp = apNone() + ) + ) + } + + pragma[nomagic] + private predicate revFlowStore( + Ap ap0, Content c, Ap ap, NodeEx node, FlowState state, TypedContent tc, NodeEx mid, + ReturnCtx returnCtx, ApOption returnAp, Configuration config + ) { + revFlow(mid, state, returnCtx, returnAp, ap0, config) and + storeStepFwd(node, ap, tc, mid, ap0, config) and + tc.getContent() = c + } + + /** + * Holds if reverse flow with access path `tail` reaches a read of `c` + * resulting in access path `cons`. + */ + pragma[nomagic] + private predicate revFlowConsCand(Ap cons, Content c, Ap tail, Configuration config) { + exists(NodeEx mid, Ap tail0 | + revFlow(mid, _, _, _, tail, config) and + tail = pragma[only_bind_into](tail0) and + readStepFwd(_, cons, c, mid, tail0, config) + ) + } + + pragma[nomagic] + private predicate revFlowOut( + DataFlowCall call, RetNodeEx ret, ReturnPosition pos, FlowState state, ReturnCtx returnCtx, + ApOption returnAp, Ap ap, Configuration config + ) { + exists(NodeEx out, boolean allowsFieldFlow | + revFlow(out, state, returnCtx, returnAp, ap, config) and + flowOutOfCallAp(call, ret, pos, out, allowsFieldFlow, ap, config) and + if allowsFieldFlow = false then ap instanceof ApNil else any() + ) + } + + pragma[nomagic] + private predicate revFlowParamToReturn( + ParamNodeEx p, FlowState state, ReturnPosition pos, Ap returnAp, Ap ap, Configuration config + ) { + revFlow(pragma[only_bind_into](p), state, TReturnCtxMaybeFlowThrough(pos), apSome(returnAp), + pragma[only_bind_into](ap), pragma[only_bind_into](config)) and + parameterFlowThroughAllowed(p, pos.getKind()) and + PrevStage::parameterMayFlowThrough(p, getApprox(ap), config) + } + + pragma[nomagic] + private predicate revFlowThrough( + DataFlowCall call, ReturnCtx returnCtx, ParamNodeEx p, FlowState state, ReturnPosition pos, + ApOption returnAp, Ap ap, Ap innerReturnAp, Configuration config + ) { + revFlowParamToReturn(p, state, pos, innerReturnAp, ap, config) and + revFlowIsReturned(call, returnCtx, returnAp, pos, innerReturnAp, config) + } + + /** + * Holds if an output from `call` is reached in the flow covered by `revFlow` + * and data might flow through the target callable resulting in reverse flow + * reaching an argument of `call`. + */ + pragma[nomagic] + private predicate revFlowIsReturned( + DataFlowCall call, ReturnCtx returnCtx, ApOption returnAp, ReturnPosition pos, Ap ap, + Configuration config + ) { + exists(RetNodeEx ret, FlowState state, CcCall ccc | + revFlowOut(call, ret, pos, state, returnCtx, returnAp, ap, config) and + returnFlowsThrough(ret, pos, state, ccc, _, _, ap, config) and + matchesCall(ccc, call) + ) + } + + pragma[nomagic] + predicate storeStepCand( + NodeEx node1, Ap ap1, TypedContent tc, NodeEx node2, DataFlowType contentType, + Configuration config + ) { + exists(Ap ap2, Content c | + PrevStage::storeStepCand(node1, _, tc, node2, contentType, config) and + revFlowStore(ap2, c, ap1, node1, _, tc, node2, _, _, config) and + revFlowConsCand(ap2, c, ap1, config) + ) + } + + predicate readStepCand(NodeEx node1, Content c, NodeEx node2, Configuration config) { + exists(Ap ap1, Ap ap2 | + revFlow(node2, _, _, _, pragma[only_bind_into](ap2), pragma[only_bind_into](config)) and + readStepFwd(node1, ap1, c, node2, ap2, config) and + revFlowStore(ap1, c, pragma[only_bind_into](ap2), _, _, _, _, _, _, + pragma[only_bind_into](config)) + ) + } + + additional predicate revFlow(NodeEx node, FlowState state, Configuration config) { + revFlow(node, state, _, _, _, config) + } + + predicate revFlow(NodeEx node, FlowState state, Ap ap, Configuration config) { + revFlow(node, state, _, _, ap, config) + } + + pragma[nomagic] + predicate revFlow(NodeEx node, Configuration config) { revFlow(node, _, _, _, _, config) } + + pragma[nomagic] + predicate revFlowAp(NodeEx node, Ap ap, Configuration config) { + revFlow(node, _, _, _, ap, config) + } + + // use an alias as a workaround for bad functionality-induced joins + pragma[nomagic] + additional predicate revFlowAlias(NodeEx node, Configuration config) { + revFlow(node, _, _, _, _, config) + } + + // use an alias as a workaround for bad functionality-induced joins + pragma[nomagic] + additional predicate revFlowAlias(NodeEx node, FlowState state, Ap ap, Configuration config) { + revFlow(node, state, ap, config) + } + + private predicate fwdConsCand(TypedContent tc, Ap ap, Configuration config) { + storeStepFwd(_, ap, tc, _, _, config) + } + + private predicate revConsCand(TypedContent tc, Ap ap, Configuration config) { + storeStepCand(_, ap, tc, _, _, config) + } + + private predicate validAp(Ap ap, Configuration config) { + revFlow(_, _, _, _, ap, config) and ap instanceof ApNil + or + exists(TypedContent head, Ap tail | + consCand(head, tail, config) and + ap = apCons(head, tail) + ) + } + + additional predicate consCand(TypedContent tc, Ap ap, Configuration config) { + revConsCand(tc, ap, config) and + validAp(ap, config) + } + + pragma[nomagic] + private predicate parameterFlowsThroughRev( + ParamNodeEx p, Ap ap, ReturnPosition pos, Ap returnAp, Configuration config + ) { + revFlow(p, _, TReturnCtxMaybeFlowThrough(pos), apSome(returnAp), ap, config) and + parameterFlowThroughAllowed(p, pos.getKind()) + } + + pragma[nomagic] + predicate parameterMayFlowThrough(ParamNodeEx p, Ap ap, Configuration config) { + exists(ReturnPosition pos | + returnFlowsThrough(_, pos, _, _, p, ap, _, config) and + parameterFlowsThroughRev(p, ap, pos, _, config) + ) + } + + pragma[nomagic] + predicate returnMayFlowThrough( + RetNodeEx ret, Ap argAp, Ap ap, ReturnKindExt kind, Configuration config + ) { + exists(ParamNodeEx p, ReturnPosition pos | + returnFlowsThrough(ret, pos, _, _, p, argAp, ap, config) and + parameterFlowsThroughRev(p, argAp, pos, ap, config) and + kind = pos.getKind() + ) + } + + pragma[nomagic] + private predicate revFlowThroughArg( + DataFlowCall call, ArgNodeEx arg, FlowState state, ReturnCtx returnCtx, ApOption returnAp, + Ap ap, Configuration config + ) { + exists(ParamNodeEx p, Ap innerReturnAp | + revFlowThrough(call, returnCtx, p, state, _, returnAp, ap, innerReturnAp, config) and + flowThroughIntoCall(call, arg, p, _, ap, innerReturnAp, config) + ) + } + + pragma[nomagic] + predicate callMayFlowThroughRev(DataFlowCall call, Configuration config) { + exists(ArgNodeEx arg, FlowState state, ReturnCtx returnCtx, ApOption returnAp, Ap ap | + revFlow(arg, state, returnCtx, returnAp, ap, config) and + revFlowThroughArg(call, arg, state, returnCtx, returnAp, ap, config) + ) + } + + additional predicate stats( + boolean fwd, int nodes, int fields, int conscand, int states, int tuples, Configuration config + ) { + fwd = true and + nodes = count(NodeEx node | fwdFlow(node, _, _, _, _, _, config)) and + fields = count(TypedContent f0 | fwdConsCand(f0, _, config)) and + conscand = count(TypedContent f0, Ap ap | fwdConsCand(f0, ap, config)) and + states = count(FlowState state | fwdFlow(_, state, _, _, _, _, config)) and + tuples = + count(NodeEx n, FlowState state, Cc cc, ParamNodeOption summaryCtx, ApOption argAp, Ap ap | + fwdFlow(n, state, cc, summaryCtx, argAp, ap, config) + ) + or + fwd = false and + nodes = count(NodeEx node | revFlow(node, _, _, _, _, config)) and + fields = count(TypedContent f0 | consCand(f0, _, config)) and + conscand = count(TypedContent f0, Ap ap | consCand(f0, ap, config)) and + states = count(FlowState state | revFlow(_, state, _, _, _, config)) and + tuples = + count(NodeEx n, FlowState state, ReturnCtx returnCtx, ApOption retAp, Ap ap | + revFlow(n, state, returnCtx, retAp, ap, config) + ) + } + /* End: Stage logic. */ + } +} + +private module BooleanCallContext { + class Cc extends boolean { + Cc() { this in [true, false] } + } + + class CcCall extends Cc { + CcCall() { this = true } + } + + /** Holds if the call context may be `call`. */ + predicate matchesCall(CcCall cc, DataFlowCall call) { any() } + + class CcNoCall extends Cc { + CcNoCall() { this = false } + } + + Cc ccNone() { result = false } + + CcCall ccSomeCall() { result = true } + + class LocalCc = Unit; + + bindingset[node, cc] + LocalCc getLocalCc(NodeEx node, Cc cc) { any() } + + bindingset[call, c, outercc] + CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) { any() } + + bindingset[call, c, innercc] + CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) { any() } +} + +private module Level1CallContext { + class Cc = CallContext; + + class CcCall = CallContextCall; + + pragma[inline] + predicate matchesCall(CcCall cc, DataFlowCall call) { cc.matchesCall(call) } + + class CcNoCall = CallContextNoCall; + + Cc ccNone() { result instanceof CallContextAny } + + CcCall ccSomeCall() { result instanceof CallContextSomeCall } + + module NoLocalCallContext { + class LocalCc = Unit; + + bindingset[node, cc] + LocalCc getLocalCc(NodeEx node, Cc cc) { any() } + + bindingset[call, c, outercc] + CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) { + checkCallContextCall(outercc, call, c) and + if recordDataFlowCallSiteDispatch(call, c) + then result = TSpecificCall(call) + else result = TSomeCall() + } + } + + module LocalCallContext { + class LocalCc = LocalCallContext; + + bindingset[node, cc] + LocalCc getLocalCc(NodeEx node, Cc cc) { + result = + getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)), + node.getEnclosingCallable()) + } + + bindingset[call, c, outercc] + CcCall getCallContextCall(DataFlowCall call, DataFlowCallable c, Cc outercc) { + checkCallContextCall(outercc, call, c) and + if recordDataFlowCallSite(call, c) then result = TSpecificCall(call) else result = TSomeCall() + } + } + + bindingset[call, c, innercc] + CcNoCall getCallContextReturn(DataFlowCallable c, DataFlowCall call, Cc innercc) { + checkCallContextReturn(innercc, c, call) and + if reducedViableImplInReturn(c, call) then result = TReturn(c, call) else result = ccNone() + } +} + +private module Stage2Param implements MkStage::StageParam { + private module PrevStage = Stage1; + + class Ap extends boolean { + Ap() { this in [true, false] } + } + + class ApNil extends Ap { + ApNil() { this = false } + } + + bindingset[result, ap] + PrevStage::Ap getApprox(Ap ap) { any() } + + ApNil getApNil(NodeEx node) { Stage1::revFlow(node, _) and exists(result) } + + bindingset[tc, tail] + Ap apCons(TypedContent tc, Ap tail) { result = true and exists(tc) and exists(tail) } + + pragma[inline] + Content getHeadContent(Ap ap) { exists(result) and ap = true } + + class ApOption = BooleanOption; + + ApOption apNone() { result = TBooleanNone() } + + ApOption apSome(Ap ap) { result = TBooleanSome(ap) } + + import Level1CallContext + import NoLocalCallContext + + bindingset[node1, state1, config] + bindingset[node2, state2, config] + predicate localStep( + NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue, + ApNil ap, Configuration config, LocalCc lcc + ) { + ( + preservesValue = true and + localFlowStepNodeCand1(node1, node2, config) and + state1 = state2 + or + preservesValue = false and + additionalLocalFlowStepNodeCand1(node1, node2, config) and + state1 = state2 + or + preservesValue = false and + additionalLocalStateStep(node1, state1, node2, state2, config) + ) and + exists(ap) and + exists(lcc) + } + + predicate flowOutOfCall = flowOutOfCallNodeCand1/6; + + predicate flowIntoCall = flowIntoCallNodeCand1/5; + + pragma[nomagic] + private predicate expectsContentCand(NodeEx node, Configuration config) { + exists(Content c | + PrevStage::revFlow(node, pragma[only_bind_into](config)) and + PrevStage::revFlowIsReadAndStored(c, pragma[only_bind_into](config)) and + expectsContentEx(node, c) + ) + } + + bindingset[node, state, ap, config] + predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { + PrevStage::revFlowState(state, pragma[only_bind_into](config)) and + exists(ap) and + not stateBarrier(node, state, config) and + ( + notExpectsContent(node) + or + ap = true and + expectsContentCand(node, config) + ) + } + + bindingset[ap, contentType] + predicate typecheckStore(Ap ap, DataFlowType contentType) { any() } +} + +private module Stage2 implements StageSig { + import MkStage::Stage +} + +pragma[nomagic] +private predicate flowOutOfCallNodeCand2( + DataFlowCall call, RetNodeEx node1, ReturnKindExt kind, NodeEx node2, boolean allowsFieldFlow, + Configuration config +) { + flowOutOfCallNodeCand1(call, node1, kind, node2, allowsFieldFlow, config) and + Stage2::revFlow(node2, pragma[only_bind_into](config)) and + Stage2::revFlowAlias(node1, pragma[only_bind_into](config)) +} + +pragma[nomagic] +private predicate flowIntoCallNodeCand2( + DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow, + Configuration config +) { + flowIntoCallNodeCand1(call, node1, node2, allowsFieldFlow, config) and + Stage2::revFlow(node2, pragma[only_bind_into](config)) and + Stage2::revFlowAlias(node1, pragma[only_bind_into](config)) +} + +private module LocalFlowBigStep { + /** + * A node where some checking is required, and hence the big-step relation + * is not allowed to step over. + */ + private class FlowCheckNode extends NodeEx { + FlowCheckNode() { + castNode(this.asNode()) or + clearsContentCached(this.asNode(), _) or + expectsContentCached(this.asNode(), _) + } + } + + /** + * Holds if `node` can be the first node in a maximal subsequence of local + * flow steps in a dataflow path. + */ + private predicate localFlowEntry(NodeEx node, FlowState state, Configuration config) { + Stage2::revFlow(node, state, config) and + ( + sourceNode(node, state, config) + or + jumpStep(_, node, config) + or + additionalJumpStep(_, node, config) + or + additionalJumpStateStep(_, _, node, state, config) + or + node instanceof ParamNodeEx + or + node.asNode() instanceof OutNodeExt + or + Stage2::storeStepCand(_, _, _, node, _, config) + or + Stage2::readStepCand(_, _, node, config) + or + node instanceof FlowCheckNode + or + exists(FlowState s | + additionalLocalStateStep(_, s, node, state, config) and + s != state + ) + ) + } + + /** + * Holds if `node` can be the last node in a maximal subsequence of local + * flow steps in a dataflow path. + */ + private predicate localFlowExit(NodeEx node, FlowState state, Configuration config) { + exists(NodeEx next | Stage2::revFlow(next, state, config) | + jumpStep(node, next, config) or + additionalJumpStep(node, next, config) or + flowIntoCallNodeCand2(_, node, next, _, config) or + flowOutOfCallNodeCand2(_, node, _, next, _, config) or + Stage2::storeStepCand(node, _, _, next, _, config) or + Stage2::readStepCand(node, _, next, config) + ) + or + exists(NodeEx next, FlowState s | Stage2::revFlow(next, s, config) | + additionalJumpStateStep(node, state, next, s, config) + or + additionalLocalStateStep(node, state, next, s, config) and + s != state + ) + or + Stage2::revFlow(node, state, config) and + node instanceof FlowCheckNode + or + sinkNode(node, state, config) + } + + pragma[noinline] + private predicate additionalLocalFlowStepNodeCand2( + NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, Configuration config + ) { + additionalLocalFlowStepNodeCand1(node1, node2, config) and + state1 = state2 and + Stage2::revFlow(node1, pragma[only_bind_into](state1), false, pragma[only_bind_into](config)) and + Stage2::revFlowAlias(node2, pragma[only_bind_into](state2), false, + pragma[only_bind_into](config)) + or + additionalLocalStateStep(node1, state1, node2, state2, config) and + Stage2::revFlow(node1, state1, false, pragma[only_bind_into](config)) and + Stage2::revFlowAlias(node2, state2, false, pragma[only_bind_into](config)) + } + + /** + * Holds if the local path from `node1` to `node2` is a prefix of a maximal + * subsequence of local flow steps in a dataflow path. + * + * This is the transitive closure of `[additional]localFlowStep` beginning + * at `localFlowEntry`. + */ + pragma[nomagic] + private predicate localFlowStepPlus( + NodeEx node1, FlowState state, NodeEx node2, boolean preservesValue, DataFlowType t, + Configuration config, LocalCallContext cc + ) { + not isUnreachableInCallCached(node2.asNode(), cc.(LocalCallContextSpecificCall).getCall()) and + ( + localFlowEntry(node1, pragma[only_bind_into](state), pragma[only_bind_into](config)) and + ( + localFlowStepNodeCand1(node1, node2, config) and + preservesValue = true and + t = node1.getDataFlowType() and // irrelevant dummy value + Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config)) + or + additionalLocalFlowStepNodeCand2(node1, state, node2, state, config) and + preservesValue = false and + t = node2.getDataFlowType() + ) and + node1 != node2 and + cc.relevantFor(node1.getEnclosingCallable()) and + not isUnreachableInCallCached(node1.asNode(), cc.(LocalCallContextSpecificCall).getCall()) + or + exists(NodeEx mid | + localFlowStepPlus(node1, pragma[only_bind_into](state), mid, preservesValue, t, + pragma[only_bind_into](config), cc) and + localFlowStepNodeCand1(mid, node2, config) and + not mid instanceof FlowCheckNode and + Stage2::revFlow(node2, pragma[only_bind_into](state), pragma[only_bind_into](config)) + ) + or + exists(NodeEx mid | + localFlowStepPlus(node1, state, mid, _, _, pragma[only_bind_into](config), cc) and + additionalLocalFlowStepNodeCand2(mid, state, node2, state, config) and + not mid instanceof FlowCheckNode and + preservesValue = false and + t = node2.getDataFlowType() + ) + ) + } + + /** + * Holds if `node1` can step to `node2` in one or more local steps and this + * path can occur as a maximal subsequence of local steps in a dataflow path. + */ + pragma[nomagic] + predicate localFlowBigStep( + NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue, + DataFlowType t, Configuration config, LocalCallContext callContext + ) { + localFlowStepPlus(node1, state1, node2, preservesValue, t, config, callContext) and + localFlowExit(node2, state1, config) and + state1 = state2 + or + additionalLocalFlowStepNodeCand2(node1, state1, node2, state2, config) and + state1 != state2 and + preservesValue = false and + t = node2.getDataFlowType() and + callContext.relevantFor(node1.getEnclosingCallable()) and + not exists(DataFlowCall call | call = callContext.(LocalCallContextSpecificCall).getCall() | + isUnreachableInCallCached(node1.asNode(), call) or + isUnreachableInCallCached(node2.asNode(), call) + ) + } +} + +private import LocalFlowBigStep + +private module Stage3Param implements MkStage::StageParam { + private module PrevStage = Stage2; + + class Ap = ApproxAccessPathFront; + + class ApNil = ApproxAccessPathFrontNil; + + PrevStage::Ap getApprox(Ap ap) { result = ap.toBoolNonEmpty() } + + ApNil getApNil(NodeEx node) { + PrevStage::revFlow(node, _) and result = TApproxFrontNil(node.getDataFlowType()) + } + + bindingset[tc, tail] + Ap apCons(TypedContent tc, Ap tail) { result.getAHead() = tc and exists(tail) } + + pragma[noinline] + Content getHeadContent(Ap ap) { result = ap.getAHead().getContent() } + + class ApOption = ApproxAccessPathFrontOption; + + ApOption apNone() { result = TApproxAccessPathFrontNone() } + + ApOption apSome(Ap ap) { result = TApproxAccessPathFrontSome(ap) } + + import BooleanCallContext + + predicate localStep( + NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue, + ApproxAccessPathFrontNil ap, Configuration config, LocalCc lcc + ) { + localFlowBigStep(node1, state1, node2, state2, preservesValue, ap.getType(), config, _) and + exists(lcc) + } + + predicate flowOutOfCall = flowOutOfCallNodeCand2/6; + + predicate flowIntoCall = flowIntoCallNodeCand2/5; + + pragma[nomagic] + private predicate expectsContentCand(NodeEx node, Ap ap, Configuration config) { + exists(Content c | + PrevStage::revFlow(node, pragma[only_bind_into](config)) and + PrevStage::readStepCand(_, c, _, pragma[only_bind_into](config)) and + expectsContentEx(node, c) and + c = ap.getAHead().getContent() + ) + } + + pragma[nomagic] + private predicate castingNodeEx(NodeEx node) { node.asNode() instanceof CastingNode } + + bindingset[node, state, ap, config] + predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { + exists(state) and + exists(config) and + (if castingNodeEx(node) then compatibleTypes(node.getDataFlowType(), ap.getType()) else any()) and + ( + notExpectsContent(node) + or + expectsContentCand(node, ap, config) + ) + } + + bindingset[ap, contentType] + predicate typecheckStore(Ap ap, DataFlowType contentType) { + // We need to typecheck stores here, since reverse flow through a getter + // might have a different type here compared to inside the getter. + compatibleTypes(ap.getType(), contentType) + } +} + +private module Stage3 implements StageSig { + import MkStage::Stage +} + +private module Stage4Param implements MkStage::StageParam { + private module PrevStage = Stage3; + + class Ap = AccessPathFront; + + class ApNil = AccessPathFrontNil; + + PrevStage::Ap getApprox(Ap ap) { result = ap.toApprox() } + + ApNil getApNil(NodeEx node) { + PrevStage::revFlow(node, _) and result = TFrontNil(node.getDataFlowType()) + } + + bindingset[tc, tail] + Ap apCons(TypedContent tc, Ap tail) { result.getHead() = tc and exists(tail) } + + pragma[noinline] + Content getHeadContent(Ap ap) { result = ap.getHead().getContent() } + + class ApOption = AccessPathFrontOption; + + ApOption apNone() { result = TAccessPathFrontNone() } + + ApOption apSome(Ap ap) { result = TAccessPathFrontSome(ap) } + + import BooleanCallContext + + pragma[nomagic] + predicate localStep( + NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue, + ApNil ap, Configuration config, LocalCc lcc + ) { + localFlowBigStep(node1, state1, node2, state2, preservesValue, ap.getType(), config, _) and + PrevStage::revFlow(node1, pragma[only_bind_into](state1), _, pragma[only_bind_into](config)) and + PrevStage::revFlowAlias(node2, pragma[only_bind_into](state2), _, pragma[only_bind_into](config)) and + exists(lcc) + } + + pragma[nomagic] + predicate flowOutOfCall( + DataFlowCall call, RetNodeEx node1, ReturnKindExt kind, NodeEx node2, boolean allowsFieldFlow, + Configuration config + ) { + exists(FlowState state | + flowOutOfCallNodeCand2(call, node1, kind, node2, allowsFieldFlow, config) and + PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and + PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _, + pragma[only_bind_into](config)) + ) + } + + pragma[nomagic] + predicate flowIntoCall( + DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow, + Configuration config + ) { + exists(FlowState state | + flowIntoCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and + PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and + PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _, + pragma[only_bind_into](config)) + ) + } + + pragma[nomagic] + private predicate clearSet(NodeEx node, ContentSet c, Configuration config) { + PrevStage::revFlow(node, config) and + clearsContentCached(node.asNode(), c) + } + + pragma[nomagic] + private predicate clearContent(NodeEx node, Content c, Configuration config) { + exists(ContentSet cs | + PrevStage::readStepCand(_, pragma[only_bind_into](c), _, pragma[only_bind_into](config)) and + c = cs.getAReadContent() and + clearSet(node, cs, pragma[only_bind_into](config)) + ) + } + + pragma[nomagic] + private predicate clear(NodeEx node, Ap ap, Configuration config) { + clearContent(node, ap.getHead().getContent(), config) + } + + pragma[nomagic] + private predicate expectsContentCand(NodeEx node, Ap ap, Configuration config) { + exists(Content c | + PrevStage::revFlow(node, pragma[only_bind_into](config)) and + PrevStage::readStepCand(_, c, _, pragma[only_bind_into](config)) and + expectsContentEx(node, c) and + c = ap.getHead().getContent() + ) + } + + pragma[nomagic] + private predicate castingNodeEx(NodeEx node) { node.asNode() instanceof CastingNode } + + bindingset[node, state, ap, config] + predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { + exists(state) and + exists(config) and + not clear(node, ap, config) and + (if castingNodeEx(node) then compatibleTypes(node.getDataFlowType(), ap.getType()) else any()) and + ( + notExpectsContent(node) + or + expectsContentCand(node, ap, config) + ) + } + + bindingset[ap, contentType] + predicate typecheckStore(Ap ap, DataFlowType contentType) { + // We need to typecheck stores here, since reverse flow through a getter + // might have a different type here compared to inside the getter. + compatibleTypes(ap.getType(), contentType) + } +} + +private module Stage4 implements StageSig { + import MkStage::Stage +} + +/** + * Holds if `argApf` is recorded as the summary context for flow reaching `node` + * and remains relevant for the following pruning stage. + */ +private predicate flowCandSummaryCtx( + NodeEx node, FlowState state, AccessPathFront argApf, Configuration config +) { + exists(AccessPathFront apf | + Stage4::revFlow(node, state, TReturnCtxMaybeFlowThrough(_), _, apf, config) and + Stage4::fwdFlow(node, state, any(Stage4::CcCall ccc), _, TAccessPathFrontSome(argApf), apf, + config) + ) +} + +/** + * Holds if a length 2 access path approximation with the head `tc` is expected + * to be expensive. + */ +private predicate expensiveLen2unfolding(TypedContent tc, Configuration config) { + exists(int tails, int nodes, int apLimit, int tupleLimit | + tails = strictcount(AccessPathFront apf | Stage4::consCand(tc, apf, config)) and + nodes = + strictcount(NodeEx n, FlowState state | + Stage4::revFlow(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config) + or + flowCandSummaryCtx(n, state, any(AccessPathFrontHead apf | apf.getHead() = tc), config) + ) and + accessPathApproxCostLimits(apLimit, tupleLimit) and + apLimit < tails and + tupleLimit < (tails - 1) * nodes and + not tc.forceHighPrecision() + ) +} + +private newtype TAccessPathApprox = + TNil(DataFlowType t) or + TConsNil(TypedContent tc, DataFlowType t) { + Stage4::consCand(tc, TFrontNil(t), _) and + not expensiveLen2unfolding(tc, _) + } or + TConsCons(TypedContent tc1, TypedContent tc2, int len) { + Stage4::consCand(tc1, TFrontHead(tc2), _) and + len in [2 .. accessPathLimit()] and + not expensiveLen2unfolding(tc1, _) + } or + TCons1(TypedContent tc, int len) { + len in [1 .. accessPathLimit()] and + expensiveLen2unfolding(tc, _) + } + +/** + * Conceptually a list of `TypedContent`s followed by a `DataFlowType`, but only + * the first two elements of the list and its length are tracked. If data flows + * from a source to a given node with a given `AccessPathApprox`, this indicates + * the sequence of dereference operations needed to get from the value in the node + * to the tracked object. The final type indicates the type of the tracked object. + */ +abstract private class AccessPathApprox extends TAccessPathApprox { + abstract string toString(); + + abstract TypedContent getHead(); + + abstract int len(); + + abstract DataFlowType getType(); + + abstract AccessPathFront getFront(); + + /** Gets the access path obtained by popping `head` from this path, if any. */ + abstract AccessPathApprox pop(TypedContent head); +} + +private class AccessPathApproxNil extends AccessPathApprox, TNil { + private DataFlowType t; + + AccessPathApproxNil() { this = TNil(t) } + + override string toString() { result = concat(": " + ppReprType(t)) } + + override TypedContent getHead() { none() } + + override int len() { result = 0 } + + override DataFlowType getType() { result = t } + + override AccessPathFront getFront() { result = TFrontNil(t) } + + override AccessPathApprox pop(TypedContent head) { none() } +} + +abstract private class AccessPathApproxCons extends AccessPathApprox { } + +private class AccessPathApproxConsNil extends AccessPathApproxCons, TConsNil { + private TypedContent tc; + private DataFlowType t; + + AccessPathApproxConsNil() { this = TConsNil(tc, t) } + + override string toString() { + // The `concat` becomes "" if `ppReprType` has no result. + result = "[" + tc.toString() + "]" + concat(" : " + ppReprType(t)) + } + + override TypedContent getHead() { result = tc } + + override int len() { result = 1 } + + override DataFlowType getType() { result = tc.getContainerType() } + + override AccessPathFront getFront() { result = TFrontHead(tc) } + + override AccessPathApprox pop(TypedContent head) { head = tc and result = TNil(t) } +} + +private class AccessPathApproxConsCons extends AccessPathApproxCons, TConsCons { + private TypedContent tc1; + private TypedContent tc2; + private int len; + + AccessPathApproxConsCons() { this = TConsCons(tc1, tc2, len) } + + override string toString() { + if len = 2 + then result = "[" + tc1.toString() + ", " + tc2.toString() + "]" + else result = "[" + tc1.toString() + ", " + tc2.toString() + ", ... (" + len.toString() + ")]" + } + + override TypedContent getHead() { result = tc1 } + + override int len() { result = len } + + override DataFlowType getType() { result = tc1.getContainerType() } + + override AccessPathFront getFront() { result = TFrontHead(tc1) } + + override AccessPathApprox pop(TypedContent head) { + head = tc1 and + ( + result = TConsCons(tc2, _, len - 1) + or + len = 2 and + result = TConsNil(tc2, _) + or + result = TCons1(tc2, len - 1) + ) + } +} + +private class AccessPathApproxCons1 extends AccessPathApproxCons, TCons1 { + private TypedContent tc; + private int len; + + AccessPathApproxCons1() { this = TCons1(tc, len) } + + override string toString() { + if len = 1 + then result = "[" + tc.toString() + "]" + else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]" + } + + override TypedContent getHead() { result = tc } + + override int len() { result = len } + + override DataFlowType getType() { result = tc.getContainerType() } + + override AccessPathFront getFront() { result = TFrontHead(tc) } + + override AccessPathApprox pop(TypedContent head) { + head = tc and + ( + exists(TypedContent tc2 | Stage4::consCand(tc, TFrontHead(tc2), _) | + result = TConsCons(tc2, _, len - 1) + or + len = 2 and + result = TConsNil(tc2, _) + or + result = TCons1(tc2, len - 1) + ) + or + exists(DataFlowType t | + len = 1 and + Stage4::consCand(tc, TFrontNil(t), _) and + result = TNil(t) + ) + ) + } +} + +/** Gets the access path obtained by popping `tc` from `ap`, if any. */ +private AccessPathApprox pop(TypedContent tc, AccessPathApprox apa) { result = apa.pop(tc) } + +/** Gets the access path obtained by pushing `tc` onto `ap`. */ +private AccessPathApprox push(TypedContent tc, AccessPathApprox apa) { apa = pop(tc, result) } + +private newtype TAccessPathApproxOption = + TAccessPathApproxNone() or + TAccessPathApproxSome(AccessPathApprox apa) + +private class AccessPathApproxOption extends TAccessPathApproxOption { + string toString() { + this = TAccessPathApproxNone() and result = "" + or + this = TAccessPathApproxSome(any(AccessPathApprox apa | result = apa.toString())) + } +} + +private module Stage5Param implements MkStage::StageParam { + private module PrevStage = Stage4; + + class Ap = AccessPathApprox; + + class ApNil = AccessPathApproxNil; + + pragma[nomagic] + PrevStage::Ap getApprox(Ap ap) { result = ap.getFront() } + + ApNil getApNil(NodeEx node) { + PrevStage::revFlow(node, _) and result = TNil(node.getDataFlowType()) + } + + bindingset[tc, tail] + Ap apCons(TypedContent tc, Ap tail) { result = push(tc, tail) } + + pragma[noinline] + Content getHeadContent(Ap ap) { result = ap.getHead().getContent() } + + class ApOption = AccessPathApproxOption; + + ApOption apNone() { result = TAccessPathApproxNone() } + + ApOption apSome(Ap ap) { result = TAccessPathApproxSome(ap) } + + import Level1CallContext + import LocalCallContext + + predicate localStep( + NodeEx node1, FlowState state1, NodeEx node2, FlowState state2, boolean preservesValue, + ApNil ap, Configuration config, LocalCc lcc + ) { + localFlowBigStep(node1, state1, node2, state2, preservesValue, ap.getType(), config, lcc) and + PrevStage::revFlow(node1, pragma[only_bind_into](state1), _, pragma[only_bind_into](config)) and + PrevStage::revFlowAlias(node2, pragma[only_bind_into](state2), _, pragma[only_bind_into](config)) + } + + pragma[nomagic] + predicate flowOutOfCall( + DataFlowCall call, RetNodeEx node1, ReturnKindExt kind, NodeEx node2, boolean allowsFieldFlow, + Configuration config + ) { + exists(FlowState state | + flowOutOfCallNodeCand2(call, node1, kind, node2, allowsFieldFlow, config) and + PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and + PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _, + pragma[only_bind_into](config)) + ) + } + + pragma[nomagic] + predicate flowIntoCall( + DataFlowCall call, ArgNodeEx node1, ParamNodeEx node2, boolean allowsFieldFlow, + Configuration config + ) { + exists(FlowState state | + flowIntoCallNodeCand2(call, node1, node2, allowsFieldFlow, config) and + PrevStage::revFlow(node2, pragma[only_bind_into](state), _, pragma[only_bind_into](config)) and + PrevStage::revFlowAlias(node1, pragma[only_bind_into](state), _, + pragma[only_bind_into](config)) + ) + } + + bindingset[node, state, ap, config] + predicate filter(NodeEx node, FlowState state, Ap ap, Configuration config) { any() } + + // Type checking is not necessary here as it has already been done in stage 3. + bindingset[ap, contentType] + predicate typecheckStore(Ap ap, DataFlowType contentType) { any() } +} + +private module Stage5 = MkStage::Stage; + +bindingset[conf, result] +private Configuration unbindConf(Configuration conf) { + exists(Configuration c | result = pragma[only_bind_into](c) and conf = pragma[only_bind_into](c)) +} + +pragma[nomagic] +private predicate nodeMayUseSummary0( + NodeEx n, ParamNodeEx p, FlowState state, AccessPathApprox apa, Configuration config +) { + exists(AccessPathApprox apa0 | + Stage5::parameterMayFlowThrough(p, _, _) and + Stage5::revFlow(n, state, TReturnCtxMaybeFlowThrough(_), _, apa0, config) and + Stage5::fwdFlow(n, state, any(CallContextCall ccc), TParamNodeSome(p.asNode()), + TAccessPathApproxSome(apa), apa0, config) + ) +} + +pragma[nomagic] +private predicate nodeMayUseSummary( + NodeEx n, FlowState state, AccessPathApprox apa, Configuration config +) { + exists(ParamNodeEx p | + Stage5::parameterMayFlowThrough(p, apa, config) and + nodeMayUseSummary0(n, p, state, apa, config) + ) +} + +private newtype TSummaryCtx = + TSummaryCtxNone() or + TSummaryCtxSome(ParamNodeEx p, FlowState state, AccessPath ap) { + exists(Configuration config | + Stage5::parameterMayFlowThrough(p, ap.getApprox(), config) and + Stage5::revFlow(p, state, _, config) + ) + } + +/** + * A context for generating flow summaries. This represents flow entry through + * a specific parameter with an access path of a specific shape. + * + * Summaries are only created for parameters that may flow through. + */ +abstract private class SummaryCtx extends TSummaryCtx { + abstract string toString(); +} + +/** A summary context from which no flow summary can be generated. */ +private class SummaryCtxNone extends SummaryCtx, TSummaryCtxNone { + override string toString() { result = "" } +} + +/** A summary context from which a flow summary can be generated. */ +private class SummaryCtxSome extends SummaryCtx, TSummaryCtxSome { + private ParamNodeEx p; + private FlowState s; + private AccessPath ap; + + SummaryCtxSome() { this = TSummaryCtxSome(p, s, ap) } + + ParameterPosition getParameterPos() { p.isParameterOf(_, result) } + + ParamNodeEx getParamNode() { result = p } + + override string toString() { result = p + ": " + ap } + + predicate hasLocationInfo( + string filepath, int startline, int startcolumn, int endline, int endcolumn + ) { + p.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn) + } +} + +/** + * Gets the number of length 2 access path approximations that correspond to `apa`. + */ +private int count1to2unfold(AccessPathApproxCons1 apa, Configuration config) { + exists(TypedContent tc, int len | + tc = apa.getHead() and + len = apa.len() and + result = + strictcount(AccessPathFront apf | + Stage5::consCand(tc, any(AccessPathApprox ap | ap.getFront() = apf and ap.len() = len - 1), + config) + ) + ) +} + +private int countNodesUsingAccessPath(AccessPathApprox apa, Configuration config) { + result = + strictcount(NodeEx n, FlowState state | + Stage5::revFlow(n, state, apa, config) or nodeMayUseSummary(n, state, apa, config) + ) +} + +/** + * Holds if a length 2 access path approximation matching `apa` is expected + * to be expensive. + */ +private predicate expensiveLen1to2unfolding(AccessPathApproxCons1 apa, Configuration config) { + exists(int aps, int nodes, int apLimit, int tupleLimit | + aps = count1to2unfold(apa, config) and + nodes = countNodesUsingAccessPath(apa, config) and + accessPathCostLimits(apLimit, tupleLimit) and + apLimit < aps and + tupleLimit < (aps - 1) * nodes + ) +} + +private AccessPathApprox getATail(AccessPathApprox apa, Configuration config) { + exists(TypedContent head | + apa.pop(head) = result and + Stage5::consCand(head, result, config) + ) +} + +/** + * Holds with `unfold = false` if a precise head-tail representation of `apa` is + * expected to be expensive. Holds with `unfold = true` otherwise. + */ +private predicate evalUnfold(AccessPathApprox apa, boolean unfold, Configuration config) { + if apa.getHead().forceHighPrecision() + then unfold = true + else + exists(int aps, int nodes, int apLimit, int tupleLimit | + aps = countPotentialAps(apa, config) and + nodes = countNodesUsingAccessPath(apa, config) and + accessPathCostLimits(apLimit, tupleLimit) and + if apLimit < aps and tupleLimit < (aps - 1) * nodes then unfold = false else unfold = true + ) +} + +/** + * Gets the number of `AccessPath`s that correspond to `apa`. + */ +pragma[assume_small_delta] +private int countAps(AccessPathApprox apa, Configuration config) { + evalUnfold(apa, false, config) and + result = 1 and + (not apa instanceof AccessPathApproxCons1 or expensiveLen1to2unfolding(apa, config)) + or + evalUnfold(apa, false, config) and + result = count1to2unfold(apa, config) and + not expensiveLen1to2unfolding(apa, config) + or + evalUnfold(apa, true, config) and + result = countPotentialAps(apa, config) +} + +/** + * Gets the number of `AccessPath`s that would correspond to `apa` assuming + * that it is expanded to a precise head-tail representation. + */ +language[monotonicAggregates] +pragma[assume_small_delta] +private int countPotentialAps(AccessPathApprox apa, Configuration config) { + apa instanceof AccessPathApproxNil and result = 1 + or + result = strictsum(AccessPathApprox tail | tail = getATail(apa, config) | countAps(tail, config)) +} + +private newtype TAccessPath = + TAccessPathNil(DataFlowType t) or + TAccessPathCons(TypedContent head, AccessPath tail) { + exists(AccessPathApproxCons apa | + not evalUnfold(apa, false, _) and + head = apa.getHead() and + tail.getApprox() = getATail(apa, _) + ) + } or + TAccessPathCons2(TypedContent head1, TypedContent head2, int len) { + exists(AccessPathApproxCons apa | + evalUnfold(apa, false, _) and + not expensiveLen1to2unfolding(apa, _) and + apa.len() = len and + head1 = apa.getHead() and + head2 = getATail(apa, _).getHead() + ) + } or + TAccessPathCons1(TypedContent head, int len) { + exists(AccessPathApproxCons apa | + evalUnfold(apa, false, _) and + expensiveLen1to2unfolding(apa, _) and + apa.len() = len and + head = apa.getHead() + ) + } + +private newtype TPathNode = + pragma[assume_small_delta] + TPathNodeMid( + NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap, Configuration config + ) { + // A PathNode is introduced by a source ... + Stage5::revFlow(node, state, config) and + sourceNode(node, state, config) and + ( + if hasSourceCallCtx(config) + then cc instanceof CallContextSomeCall + else cc instanceof CallContextAny + ) and + sc instanceof SummaryCtxNone and + ap = TAccessPathNil(node.getDataFlowType()) + or + // ... or a step from an existing PathNode to another node. + exists(PathNodeMid mid | + pathStep(mid, node, state, cc, sc, ap) and + pragma[only_bind_into](config) = mid.getConfiguration() and + Stage5::revFlow(node, state, ap.getApprox(), pragma[only_bind_into](config)) + ) + } or + TPathNodeSink(NodeEx node, FlowState state, Configuration config) { + exists(PathNodeMid sink | + sink.isAtSink() and + node = sink.getNodeEx() and + state = sink.getState() and + config = sink.getConfiguration() + ) + } or + TPathNodeSourceGroup(string sourceGroup, Configuration config) { + exists(PathNodeImpl source | + sourceGroup = source.getSourceGroup() and + config = source.getConfiguration() + ) + } or + TPathNodeSinkGroup(string sinkGroup, Configuration config) { + exists(PathNodeSink sink | + sinkGroup = sink.getSinkGroup() and + config = sink.getConfiguration() + ) + } + +/** + * A list of `TypedContent`s followed by a `DataFlowType`. If data flows from a + * source to a given node with a given `AccessPath`, this indicates the sequence + * of dereference operations needed to get from the value in the node to the + * tracked object. The final type indicates the type of the tracked object. + */ +private class AccessPath extends TAccessPath { + /** Gets the head of this access path, if any. */ + abstract TypedContent getHead(); + + /** Gets the tail of this access path, if any. */ + abstract AccessPath getTail(); + + /** Gets the front of this access path. */ + abstract AccessPathFront getFront(); + + /** Gets the approximation of this access path. */ + abstract AccessPathApprox getApprox(); + + /** Gets the length of this access path. */ + abstract int length(); + + /** Gets a textual representation of this access path. */ + abstract string toString(); + + /** Gets the access path obtained by popping `tc` from this access path, if any. */ + final AccessPath pop(TypedContent tc) { + result = this.getTail() and + tc = this.getHead() + } + + /** Gets the access path obtained by pushing `tc` onto this access path. */ + final AccessPath push(TypedContent tc) { this = result.pop(tc) } +} + +private class AccessPathNil extends AccessPath, TAccessPathNil { + private DataFlowType t; + + AccessPathNil() { this = TAccessPathNil(t) } + + DataFlowType getType() { result = t } + + override TypedContent getHead() { none() } + + override AccessPath getTail() { none() } + + override AccessPathFrontNil getFront() { result = TFrontNil(t) } + + override AccessPathApproxNil getApprox() { result = TNil(t) } + + override int length() { result = 0 } + + override string toString() { result = concat(": " + ppReprType(t)) } +} + +private class AccessPathCons extends AccessPath, TAccessPathCons { + private TypedContent head; + private AccessPath tail; + + AccessPathCons() { this = TAccessPathCons(head, tail) } + + override TypedContent getHead() { result = head } + + override AccessPath getTail() { result = tail } + + override AccessPathFrontHead getFront() { result = TFrontHead(head) } + + pragma[assume_small_delta] + override AccessPathApproxCons getApprox() { + result = TConsNil(head, tail.(AccessPathNil).getType()) + or + result = TConsCons(head, tail.getHead(), this.length()) + or + result = TCons1(head, this.length()) + } + + pragma[assume_small_delta] + override int length() { result = 1 + tail.length() } + + private string toStringImpl(boolean needsSuffix) { + exists(DataFlowType t | + tail = TAccessPathNil(t) and + needsSuffix = false and + result = head.toString() + "]" + concat(" : " + ppReprType(t)) + ) + or + result = head + ", " + tail.(AccessPathCons).toStringImpl(needsSuffix) + or + exists(TypedContent tc2, TypedContent tc3, int len | tail = TAccessPathCons2(tc2, tc3, len) | + result = head + ", " + tc2 + ", " + tc3 + ", ... (" and len > 2 and needsSuffix = true + or + result = head + ", " + tc2 + ", " + tc3 + "]" and len = 2 and needsSuffix = false + ) + or + exists(TypedContent tc2, int len | tail = TAccessPathCons1(tc2, len) | + result = head + ", " + tc2 + ", ... (" and len > 1 and needsSuffix = true + or + result = head + ", " + tc2 + "]" and len = 1 and needsSuffix = false + ) + } + + override string toString() { + result = "[" + this.toStringImpl(true) + this.length().toString() + ")]" + or + result = "[" + this.toStringImpl(false) + } +} + +private class AccessPathCons2 extends AccessPath, TAccessPathCons2 { + private TypedContent head1; + private TypedContent head2; + private int len; + + AccessPathCons2() { this = TAccessPathCons2(head1, head2, len) } + + override TypedContent getHead() { result = head1 } + + override AccessPath getTail() { + Stage5::consCand(head1, result.getApprox(), _) and + result.getHead() = head2 and + result.length() = len - 1 + } + + override AccessPathFrontHead getFront() { result = TFrontHead(head1) } + + override AccessPathApproxCons getApprox() { + result = TConsCons(head1, head2, len) or + result = TCons1(head1, len) + } + + override int length() { result = len } + + override string toString() { + if len = 2 + then result = "[" + head1.toString() + ", " + head2.toString() + "]" + else + result = "[" + head1.toString() + ", " + head2.toString() + ", ... (" + len.toString() + ")]" + } +} + +private class AccessPathCons1 extends AccessPath, TAccessPathCons1 { + private TypedContent head; + private int len; + + AccessPathCons1() { this = TAccessPathCons1(head, len) } + + override TypedContent getHead() { result = head } + + override AccessPath getTail() { + Stage5::consCand(head, result.getApprox(), _) and result.length() = len - 1 + } + + override AccessPathFrontHead getFront() { result = TFrontHead(head) } + + override AccessPathApproxCons getApprox() { result = TCons1(head, len) } + + override int length() { result = len } + + override string toString() { + if len = 1 + then result = "[" + head.toString() + "]" + else result = "[" + head.toString() + ", ... (" + len.toString() + ")]" + } +} + +abstract private class PathNodeImpl extends TPathNode { + /** Gets the `FlowState` of this node. */ + abstract FlowState getState(); + + /** Gets the associated configuration. */ + abstract Configuration getConfiguration(); + + /** Holds if this node is a source. */ + abstract predicate isSource(); + + abstract PathNodeImpl getASuccessorImpl(); + + private PathNodeImpl getASuccessorIfHidden() { + this.isHidden() and + result = this.getASuccessorImpl() + } + + pragma[nomagic] + private PathNodeImpl getANonHiddenSuccessor0() { + result = this.getASuccessorIfHidden*() and + not result.isHidden() + } + + final PathNodeImpl getANonHiddenSuccessor() { + result = this.getASuccessorImpl().getANonHiddenSuccessor0() and + not this.isHidden() + } + + abstract NodeEx getNodeEx(); + + predicate isHidden() { + not this.getConfiguration().includeHiddenNodes() and + ( + hiddenNode(this.getNodeEx().asNode()) and + not this.isSource() and + not this instanceof PathNodeSink + or + this.getNodeEx() instanceof TNodeImplicitRead + ) + } + + string getSourceGroup() { + this.isSource() and + this.getConfiguration().sourceGrouping(this.getNodeEx().asNode(), result) + } + + predicate isFlowSource() { + this.isSource() and not exists(this.getSourceGroup()) + or + this instanceof PathNodeSourceGroup + } + + predicate isFlowSink() { + this = any(PathNodeSink sink | not exists(sink.getSinkGroup())) or + this instanceof PathNodeSinkGroup + } + + private string ppAp() { + this instanceof PathNodeSink and result = "" + or + exists(string s | s = this.(PathNodeMid).getAp().toString() | + if s = "" then result = "" else result = " " + s + ) + } + + private string ppCtx() { + this instanceof PathNodeSink and result = "" + or + result = " <" + this.(PathNodeMid).getCallContext().toString() + ">" + } + + /** Gets a textual representation of this element. */ + string toString() { result = this.getNodeEx().toString() + this.ppAp() } + + /** + * Gets a textual representation of this element, including a textual + * representation of the call context. + */ + string toStringWithContext() { result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx() } + + /** + * Holds if this element is at the specified location. + * The location spans column `startcolumn` of line `startline` to + * column `endcolumn` of line `endline` in file `filepath`. + * For more information, see + * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/). + */ + predicate hasLocationInfo( + string filepath, int startline, int startcolumn, int endline, int endcolumn + ) { + this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn) + } +} + +/** Holds if `n` can reach a sink. */ +private predicate directReach(PathNodeImpl n) { + n instanceof PathNodeSink or + n instanceof PathNodeSinkGroup or + directReach(n.getANonHiddenSuccessor()) +} + +/** Holds if `n` can reach a sink or is used in a subpath that can reach a sink. */ +private predicate reach(PathNodeImpl n) { directReach(n) or Subpaths::retReach(n) } + +/** Holds if `n1.getASuccessor() = n2` and `n2` can reach a sink. */ +private predicate pathSucc(PathNodeImpl n1, PathNodeImpl n2) { + n1.getANonHiddenSuccessor() = n2 and directReach(n2) +} + +private predicate pathSuccPlus(PathNodeImpl n1, PathNodeImpl n2) = fastTC(pathSucc/2)(n1, n2) + +/** + * A `Node` augmented with a call context (except for sinks), an access path, and a configuration. + * Only those `PathNode`s that are reachable from a source, and which can reach a sink, are generated. + */ +class PathNode instanceof PathNodeImpl { + PathNode() { reach(this) } + + /** Gets a textual representation of this element. */ + final string toString() { result = super.toString() } + + /** + * Gets a textual representation of this element, including a textual + * representation of the call context. + */ + final string toStringWithContext() { result = super.toStringWithContext() } + + /** + * Holds if this element is at the specified location. + * The location spans column `startcolumn` of line `startline` to + * column `endcolumn` of line `endline` in file `filepath`. + * For more information, see + * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/). + */ + final predicate hasLocationInfo( + string filepath, int startline, int startcolumn, int endline, int endcolumn + ) { + super.hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn) + } + + /** Gets the underlying `Node`. */ + final Node getNode() { super.getNodeEx().projectToNode() = result } + + /** Gets the `FlowState` of this node. */ + final FlowState getState() { result = super.getState() } + + /** Gets the associated configuration. */ + final Configuration getConfiguration() { result = super.getConfiguration() } + + /** Gets a successor of this node, if any. */ + final PathNode getASuccessor() { result = super.getANonHiddenSuccessor() } + + /** Holds if this node is a source. */ + final predicate isSource() { super.isSource() } + + /** Holds if this node is a grouping of source nodes. */ + final predicate isSourceGroup(string group) { this = TPathNodeSourceGroup(group, _) } + + /** Holds if this node is a grouping of sink nodes. */ + final predicate isSinkGroup(string group) { this = TPathNodeSinkGroup(group, _) } +} + +/** + * Provides the query predicates needed to include a graph in a path-problem query. + */ +module PathGraph { + /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */ + query predicate edges(PathNode a, PathNode b) { a.getASuccessor() = b } + + /** Holds if `n` is a node in the graph of data flow path explanations. */ + query predicate nodes(PathNode n, string key, string val) { + key = "semmle.label" and val = n.toString() + } + + /** + * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through + * a subpath between `par` and `ret` with the connecting edges `arg -> par` and + * `ret -> out` is summarized as the edge `arg -> out`. + */ + query predicate subpaths(PathNode arg, PathNode par, PathNode ret, PathNode out) { + Subpaths::subpaths(arg, par, ret, out) + } +} + +/** + * An intermediate flow graph node. This is a triple consisting of a `Node`, + * a `CallContext`, and a `Configuration`. + */ +private class PathNodeMid extends PathNodeImpl, TPathNodeMid { + NodeEx node; + FlowState state; + CallContext cc; + SummaryCtx sc; + AccessPath ap; + Configuration config; + + PathNodeMid() { this = TPathNodeMid(node, state, cc, sc, ap, config) } + + override NodeEx getNodeEx() { result = node } + + override FlowState getState() { result = state } + + CallContext getCallContext() { result = cc } + + SummaryCtx getSummaryCtx() { result = sc } + + AccessPath getAp() { result = ap } + + override Configuration getConfiguration() { result = config } + + private PathNodeMid getSuccMid() { + pathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(), + result.getSummaryCtx(), result.getAp()) and + result.getConfiguration() = unbindConf(this.getConfiguration()) + } + + override PathNodeImpl getASuccessorImpl() { + // an intermediate step to another intermediate node + result = this.getSuccMid() + or + // a final step to a sink + result = this.getSuccMid().projectToSink() + } + + override predicate isSource() { + sourceNode(node, state, config) and + ( + if hasSourceCallCtx(config) + then cc instanceof CallContextSomeCall + else cc instanceof CallContextAny + ) and + sc instanceof SummaryCtxNone and + ap = TAccessPathNil(node.getDataFlowType()) + } + + predicate isAtSink() { + sinkNode(node, state, config) and + ap instanceof AccessPathNil and + if hasSinkCallCtx(config) + then + // For `FeatureHasSinkCallContext` the condition `cc instanceof CallContextNoCall` + // is exactly what we need to check. This also implies + // `sc instanceof SummaryCtxNone`. + // For `FeatureEqualSourceSinkCallContext` the initial call context was + // set to `CallContextSomeCall` and jumps are disallowed, so + // `cc instanceof CallContextNoCall` never holds. On the other hand, + // in this case there's never any need to enter a call except to identify + // a summary, so the condition in `pathIntoCallable` enforces this, which + // means that `sc instanceof SummaryCtxNone` holds if and only if we are + // in the call context of the source. + sc instanceof SummaryCtxNone or + cc instanceof CallContextNoCall + else any() + } + + PathNodeSink projectToSink() { + this.isAtSink() and + result.getNodeEx() = node and + result.getState() = state and + result.getConfiguration() = unbindConf(config) + } +} + +/** + * A flow graph node corresponding to a sink. This is disjoint from the + * intermediate nodes in order to uniquely correspond to a given sink by + * excluding the `CallContext`. + */ +private class PathNodeSink extends PathNodeImpl, TPathNodeSink { + NodeEx node; + FlowState state; + Configuration config; + + PathNodeSink() { this = TPathNodeSink(node, state, config) } + + override NodeEx getNodeEx() { result = node } + + override FlowState getState() { result = state } + + override Configuration getConfiguration() { result = config } + + override PathNodeImpl getASuccessorImpl() { + result = TPathNodeSinkGroup(this.getSinkGroup(), config) + } + + override predicate isSource() { sourceNode(node, state, config) } + + string getSinkGroup() { config.sinkGrouping(node.asNode(), result) } +} + +private class PathNodeSourceGroup extends PathNodeImpl, TPathNodeSourceGroup { + string sourceGroup; + Configuration config; + + PathNodeSourceGroup() { this = TPathNodeSourceGroup(sourceGroup, config) } + + override NodeEx getNodeEx() { none() } + + override FlowState getState() { none() } + + override Configuration getConfiguration() { result = config } + + override PathNodeImpl getASuccessorImpl() { + result.getSourceGroup() = sourceGroup and + result.getConfiguration() = config + } + + override predicate isSource() { none() } + + override string toString() { result = sourceGroup } + + override predicate hasLocationInfo( + string filepath, int startline, int startcolumn, int endline, int endcolumn + ) { + filepath = "" and startline = 0 and startcolumn = 0 and endline = 0 and endcolumn = 0 + } +} + +private class PathNodeSinkGroup extends PathNodeImpl, TPathNodeSinkGroup { + string sinkGroup; + Configuration config; + + PathNodeSinkGroup() { this = TPathNodeSinkGroup(sinkGroup, config) } + + override NodeEx getNodeEx() { none() } + + override FlowState getState() { none() } + + override Configuration getConfiguration() { result = config } + + override PathNodeImpl getASuccessorImpl() { none() } + + override predicate isSource() { none() } + + override string toString() { result = sinkGroup } + + override predicate hasLocationInfo( + string filepath, int startline, int startcolumn, int endline, int endcolumn + ) { + filepath = "" and startline = 0 and startcolumn = 0 and endline = 0 and endcolumn = 0 + } +} + +private predicate pathNode( + PathNodeMid mid, NodeEx midnode, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap, + Configuration conf, LocalCallContext localCC +) { + midnode = mid.getNodeEx() and + state = mid.getState() and + conf = mid.getConfiguration() and + cc = mid.getCallContext() and + sc = mid.getSummaryCtx() and + localCC = + getLocalCallContext(pragma[only_bind_into](pragma[only_bind_out](cc)), + midnode.getEnclosingCallable()) and + ap = mid.getAp() +} + +/** + * Holds if data may flow from `mid` to `node`. The last step in or out of + * a callable is recorded by `cc`. + */ +pragma[assume_small_delta] +pragma[nomagic] +private predicate pathStep( + PathNodeMid mid, NodeEx node, FlowState state, CallContext cc, SummaryCtx sc, AccessPath ap +) { + exists(NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC | + pathNode(mid, midnode, state0, cc, sc, ap, conf, localCC) and + localFlowBigStep(midnode, state0, node, state, true, _, conf, localCC) + ) + or + exists( + AccessPath ap0, NodeEx midnode, FlowState state0, Configuration conf, LocalCallContext localCC + | + pathNode(mid, midnode, state0, cc, sc, ap0, conf, localCC) and + localFlowBigStep(midnode, state0, node, state, false, ap.(AccessPathNil).getType(), conf, + localCC) and + ap0 instanceof AccessPathNil + ) + or + jumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and + state = mid.getState() and + cc instanceof CallContextAny and + sc instanceof SummaryCtxNone and + ap = mid.getAp() + or + additionalJumpStep(mid.getNodeEx(), node, mid.getConfiguration()) and + state = mid.getState() and + cc instanceof CallContextAny and + sc instanceof SummaryCtxNone and + mid.getAp() instanceof AccessPathNil and + ap = TAccessPathNil(node.getDataFlowType()) + or + additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, mid.getConfiguration()) and + cc instanceof CallContextAny and + sc instanceof SummaryCtxNone and + mid.getAp() instanceof AccessPathNil and + ap = TAccessPathNil(node.getDataFlowType()) + or + exists(TypedContent tc | pathStoreStep(mid, node, state, ap.pop(tc), tc, cc)) and + sc = mid.getSummaryCtx() + or + exists(TypedContent tc | pathReadStep(mid, node, state, ap.push(tc), tc, cc)) and + sc = mid.getSummaryCtx() + or + pathIntoCallable(mid, node, state, _, cc, sc, _, _) and ap = mid.getAp() + or + pathOutOfCallable(mid, node, state, cc) and ap = mid.getAp() and sc instanceof SummaryCtxNone + or + pathThroughCallable(mid, node, state, cc, ap) and sc = mid.getSummaryCtx() +} + +pragma[nomagic] +private predicate pathReadStep( + PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc +) { + ap0 = mid.getAp() and + tc = ap0.getHead() and + Stage5::readStepCand(mid.getNodeEx(), tc.getContent(), node, mid.getConfiguration()) and + state = mid.getState() and + cc = mid.getCallContext() +} + +pragma[nomagic] +private predicate pathStoreStep( + PathNodeMid mid, NodeEx node, FlowState state, AccessPath ap0, TypedContent tc, CallContext cc +) { + ap0 = mid.getAp() and + Stage5::storeStepCand(mid.getNodeEx(), _, tc, node, _, mid.getConfiguration()) and + state = mid.getState() and + cc = mid.getCallContext() +} + +private predicate pathOutOfCallable0( + PathNodeMid mid, ReturnPosition pos, FlowState state, CallContext innercc, AccessPathApprox apa, + Configuration config +) { + pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and + state = mid.getState() and + innercc = mid.getCallContext() and + innercc instanceof CallContextNoCall and + apa = mid.getAp().getApprox() and + config = mid.getConfiguration() +} + +pragma[nomagic] +private predicate pathOutOfCallable1( + PathNodeMid mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc, + AccessPathApprox apa, Configuration config +) { + exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc | + pathOutOfCallable0(mid, pos, state, innercc, apa, config) and + c = pos.getCallable() and + kind = pos.getKind() and + resolveReturn(innercc, c, call) + | + if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext() + ) +} + +pragma[noinline] +private NodeEx getAnOutNodeFlow( + ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config +) { + result.asNode() = kind.getAnOutNode(call) and + Stage5::revFlow(result, _, apa, config) +} + +/** + * Holds if data may flow from `mid` to `out`. The last step of this path + * is a return from a callable and is recorded by `cc`, if needed. + */ +pragma[noinline] +private predicate pathOutOfCallable(PathNodeMid mid, NodeEx out, FlowState state, CallContext cc) { + exists(ReturnKindExt kind, DataFlowCall call, AccessPathApprox apa, Configuration config | + pathOutOfCallable1(mid, call, kind, state, cc, apa, config) and + out = getAnOutNodeFlow(kind, call, apa, config) + ) +} + +/** + * Holds if data may flow from `mid` to the `i`th argument of `call` in `cc`. + */ +pragma[noinline] +private predicate pathIntoArg( + PathNodeMid mid, ParameterPosition ppos, FlowState state, CallContext cc, DataFlowCall call, + AccessPath ap, AccessPathApprox apa, Configuration config +) { + exists(ArgNodeEx arg, ArgumentPosition apos | + pathNode(mid, arg, state, cc, _, ap, config, _) and + arg.asNode().(ArgNode).argumentOf(call, apos) and + apa = ap.getApprox() and + parameterMatch(ppos, apos) + ) +} + +pragma[nomagic] +private predicate parameterCand( + DataFlowCallable callable, ParameterPosition pos, AccessPathApprox apa, Configuration config +) { + exists(ParamNodeEx p | + Stage5::revFlow(p, _, apa, config) and + p.isParameterOf(callable, pos) + ) +} + +pragma[nomagic] +private predicate pathIntoCallable0( + PathNodeMid mid, DataFlowCallable callable, ParameterPosition pos, FlowState state, + CallContext outercc, DataFlowCall call, AccessPath ap, Configuration config +) { + exists(AccessPathApprox apa | + pathIntoArg(mid, pragma[only_bind_into](pos), state, outercc, call, ap, + pragma[only_bind_into](apa), pragma[only_bind_into](config)) and + callable = resolveCall(call, outercc) and + parameterCand(callable, pragma[only_bind_into](pos), pragma[only_bind_into](apa), + pragma[only_bind_into](config)) + ) +} + +/** + * Holds if data may flow from `mid` to `p` through `call`. The contexts + * before and after entering the callable are `outercc` and `innercc`, + * respectively. + */ +pragma[nomagic] +private predicate pathIntoCallable( + PathNodeMid mid, ParamNodeEx p, FlowState state, CallContext outercc, CallContextCall innercc, + SummaryCtx sc, DataFlowCall call, Configuration config +) { + exists(ParameterPosition pos, DataFlowCallable callable, AccessPath ap | + pathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and + p.isParameterOf(callable, pos) and + ( + sc = TSummaryCtxSome(p, state, ap) + or + not exists(TSummaryCtxSome(p, state, ap)) and + sc = TSummaryCtxNone() and + // When the call contexts of source and sink needs to match then there's + // never any reason to enter a callable except to find a summary. See also + // the comment in `PathNodeMid::isAtSink`. + not config.getAFeature() instanceof FeatureEqualSourceSinkCallContext + ) + | + if recordDataFlowCallSite(call, callable) + then innercc = TSpecificCall(call) + else innercc = TSomeCall() + ) +} + +/** Holds if data may flow from a parameter given by `sc` to a return of kind `kind`. */ +pragma[nomagic] +private predicate paramFlowsThrough( + ReturnKindExt kind, FlowState state, CallContextCall cc, SummaryCtxSome sc, AccessPath ap, + AccessPathApprox apa, Configuration config +) { + exists(RetNodeEx ret | + pathNode(_, ret, state, cc, sc, ap, config, _) and + kind = ret.getKind() and + apa = ap.getApprox() and + parameterFlowThroughAllowed(sc.getParamNode(), kind) + ) +} + +pragma[nomagic] +private predicate pathThroughCallable0( + DataFlowCall call, PathNodeMid mid, ReturnKindExt kind, FlowState state, CallContext cc, + AccessPath ap, AccessPathApprox apa, Configuration config +) { + exists(CallContext innercc, SummaryCtx sc | + pathIntoCallable(mid, _, _, cc, innercc, sc, call, config) and + paramFlowsThrough(kind, state, innercc, sc, ap, apa, config) + ) +} + +/** + * Holds if data may flow from `mid` through a callable to the node `out`. + * The context `cc` is restored to its value prior to entering the callable. + */ +pragma[noinline] +private predicate pathThroughCallable( + PathNodeMid mid, NodeEx out, FlowState state, CallContext cc, AccessPath ap +) { + exists(DataFlowCall call, ReturnKindExt kind, AccessPathApprox apa, Configuration config | + pathThroughCallable0(call, mid, kind, state, cc, ap, apa, config) and + out = getAnOutNodeFlow(kind, call, apa, config) + ) +} + +private module Subpaths { + /** + * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by + * `kind`, `sc`, `apout`, and `innercc`. + */ + pragma[nomagic] + private predicate subpaths01( + PathNodeImpl arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind, + NodeEx out, FlowState sout, AccessPath apout + ) { + exists(Configuration config | + pathThroughCallable(arg, out, pragma[only_bind_into](sout), _, pragma[only_bind_into](apout)) and + pathIntoCallable(arg, par, _, _, innercc, sc, _, config) and + paramFlowsThrough(kind, pragma[only_bind_into](sout), innercc, sc, + pragma[only_bind_into](apout), _, unbindConf(config)) and + not arg.isHidden() + ) + } + + /** + * Holds if `(arg, par, ret, out)` forms a subpath-tuple and `ret` is determined by + * `kind`, `sc`, `sout`, `apout`, and `innercc`. + */ + pragma[nomagic] + private predicate subpaths02( + PathNodeImpl arg, ParamNodeEx par, SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind, + NodeEx out, FlowState sout, AccessPath apout + ) { + subpaths01(arg, par, sc, innercc, kind, out, sout, apout) and + out.asNode() = kind.getAnOutNode(_) + } + + pragma[nomagic] + private Configuration getPathNodeConf(PathNodeImpl n) { result = n.getConfiguration() } + + /** + * Holds if `(arg, par, ret, out)` forms a subpath-tuple. + */ + pragma[nomagic] + private predicate subpaths03( + PathNodeImpl arg, ParamNodeEx par, PathNodeMid ret, NodeEx out, FlowState sout, AccessPath apout + ) { + exists(SummaryCtxSome sc, CallContext innercc, ReturnKindExt kind, RetNodeEx retnode | + subpaths02(arg, par, sc, innercc, kind, out, sout, apout) and + pathNode(ret, retnode, sout, innercc, sc, apout, unbindConf(getPathNodeConf(arg)), _) and + kind = retnode.getKind() + ) + } + + private PathNodeImpl localStepToHidden(PathNodeImpl n) { + n.getASuccessorImpl() = result and + result.isHidden() and + exists(NodeEx n1, NodeEx n2 | n1 = n.getNodeEx() and n2 = result.getNodeEx() | + localFlowBigStep(n1, _, n2, _, _, _, _, _) or + store(n1, _, n2, _, _) or + readSet(n1, _, n2, _) + ) + } + + pragma[nomagic] + private predicate hasSuccessor(PathNodeImpl pred, PathNodeMid succ, NodeEx succNode) { + succ = pred.getANonHiddenSuccessor() and + succNode = succ.getNodeEx() + } + + /** + * Holds if `(arg, par, ret, out)` forms a subpath-tuple, that is, flow through + * a subpath between `par` and `ret` with the connecting edges `arg -> par` and + * `ret -> out` is summarized as the edge `arg -> out`. + */ + predicate subpaths(PathNodeImpl arg, PathNodeImpl par, PathNodeImpl ret, PathNodeImpl out) { + exists(ParamNodeEx p, NodeEx o, FlowState sout, AccessPath apout, PathNodeMid out0 | + pragma[only_bind_into](arg).getANonHiddenSuccessor() = pragma[only_bind_into](out0) and + subpaths03(pragma[only_bind_into](arg), p, localStepToHidden*(ret), o, sout, apout) and + hasSuccessor(pragma[only_bind_into](arg), par, p) and + not ret.isHidden() and + pathNode(out0, o, sout, _, _, apout, _, _) + | + out = out0 or out = out0.projectToSink() + ) + } + + /** + * Holds if `n` can reach a return node in a summarized subpath that can reach a sink. + */ + predicate retReach(PathNodeImpl n) { + exists(PathNodeImpl out | subpaths(_, _, n, out) | directReach(out) or retReach(out)) + or + exists(PathNodeImpl mid | + retReach(mid) and + n.getANonHiddenSuccessor() = mid and + not subpaths(_, mid, _, _) + ) + } +} + +/** + * Holds if data can flow (inter-procedurally) from `source` to `sink`. + * + * Will only have results if `configuration` has non-empty sources and + * sinks. + */ +private predicate hasFlowPath( + PathNodeImpl flowsource, PathNodeImpl flowsink, Configuration configuration +) { + flowsource.isFlowSource() and + flowsource.getConfiguration() = configuration and + (flowsource = flowsink or pathSuccPlus(flowsource, flowsink)) and + flowsink.isFlowSink() +} + +private predicate flowsTo( + PathNodeImpl flowsource, PathNodeSink flowsink, Node source, Node sink, + Configuration configuration +) { + flowsource.isSource() and + flowsource.getConfiguration() = configuration and + flowsource.getNodeEx().asNode() = source and + (flowsource = flowsink or pathSuccPlus(flowsource, flowsink)) and + flowsink.getNodeEx().asNode() = sink +} + +/** + * Holds if data can flow (inter-procedurally) from `source` to `sink`. + * + * Will only have results if `configuration` has non-empty sources and + * sinks. + */ +predicate flowsTo(Node source, Node sink, Configuration configuration) { + flowsTo(_, _, source, sink, configuration) +} + +private predicate finalStats( + boolean fwd, int nodes, int fields, int conscand, int states, int tuples +) { + fwd = true and + nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0)) and + fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0)) and + conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap)) and + states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state)) and + tuples = count(PathNodeImpl pn) + or + fwd = false and + nodes = count(NodeEx n0 | exists(PathNodeImpl pn | pn.getNodeEx() = n0 and reach(pn))) and + fields = count(TypedContent f0 | exists(PathNodeMid pn | pn.getAp().getHead() = f0 and reach(pn))) and + conscand = count(AccessPath ap | exists(PathNodeMid pn | pn.getAp() = ap and reach(pn))) and + states = count(FlowState state | exists(PathNodeMid pn | pn.getState() = state and reach(pn))) and + tuples = count(PathNode pn) +} + +/** + * INTERNAL: Only for debugging. + * + * Calculates per-stage metrics for data flow. + */ +predicate stageStats( + int n, string stage, int nodes, int fields, int conscand, int states, int tuples, + Configuration config +) { + stage = "1 Fwd" and + n = 10 and + Stage1::stats(true, nodes, fields, conscand, states, tuples, config) + or + stage = "1 Rev" and + n = 15 and + Stage1::stats(false, nodes, fields, conscand, states, tuples, config) + or + stage = "2 Fwd" and + n = 20 and + Stage2::stats(true, nodes, fields, conscand, states, tuples, config) + or + stage = "2 Rev" and + n = 25 and + Stage2::stats(false, nodes, fields, conscand, states, tuples, config) + or + stage = "3 Fwd" and + n = 30 and + Stage3::stats(true, nodes, fields, conscand, states, tuples, config) + or + stage = "3 Rev" and + n = 35 and + Stage3::stats(false, nodes, fields, conscand, states, tuples, config) + or + stage = "4 Fwd" and + n = 40 and + Stage4::stats(true, nodes, fields, conscand, states, tuples, config) + or + stage = "4 Rev" and + n = 45 and + Stage4::stats(false, nodes, fields, conscand, states, tuples, config) + or + stage = "5 Fwd" and + n = 50 and + Stage5::stats(true, nodes, fields, conscand, states, tuples, config) + or + stage = "5 Rev" and + n = 55 and + Stage5::stats(false, nodes, fields, conscand, states, tuples, config) + or + stage = "6 Fwd" and n = 60 and finalStats(true, nodes, fields, conscand, states, tuples) + or + stage = "6 Rev" and n = 65 and finalStats(false, nodes, fields, conscand, states, tuples) +} + +private module FlowExploration { + private predicate callableStep(DataFlowCallable c1, DataFlowCallable c2, Configuration config) { + exists(NodeEx node1, NodeEx node2 | + jumpStep(node1, node2, config) + or + additionalJumpStep(node1, node2, config) + or + additionalJumpStateStep(node1, _, node2, _, config) + or + // flow into callable + viableParamArgEx(_, node2, node1) + or + // flow out of a callable + viableReturnPosOutEx(_, node1.(RetNodeEx).getReturnPosition(), node2) + | + c1 = node1.getEnclosingCallable() and + c2 = node2.getEnclosingCallable() and + c1 != c2 + ) + } + + private predicate interestingCallableSrc(DataFlowCallable c, Configuration config) { + exists(Node n | config.isSource(n) or config.isSource(n, _) | c = getNodeEnclosingCallable(n)) + or + exists(DataFlowCallable mid | + interestingCallableSrc(mid, config) and callableStep(mid, c, config) + ) + } + + private predicate interestingCallableSink(DataFlowCallable c, Configuration config) { + exists(Node n | config.isSink(n) or config.isSink(n, _) | c = getNodeEnclosingCallable(n)) + or + exists(DataFlowCallable mid | + interestingCallableSink(mid, config) and callableStep(c, mid, config) + ) + } + + private newtype TCallableExt = + TCallable(DataFlowCallable c, Configuration config) { + interestingCallableSrc(c, config) or + interestingCallableSink(c, config) + } or + TCallableSrc() or + TCallableSink() + + private predicate callableExtSrc(TCallableSrc src) { any() } + + private predicate callableExtSink(TCallableSink sink) { any() } + + private predicate callableExtStepFwd(TCallableExt ce1, TCallableExt ce2) { + exists(DataFlowCallable c1, DataFlowCallable c2, Configuration config | + callableStep(c1, c2, config) and + ce1 = TCallable(c1, pragma[only_bind_into](config)) and + ce2 = TCallable(c2, pragma[only_bind_into](config)) + ) + or + exists(Node n, Configuration config | + ce1 = TCallableSrc() and + (config.isSource(n) or config.isSource(n, _)) and + ce2 = TCallable(getNodeEnclosingCallable(n), config) + ) + or + exists(Node n, Configuration config | + ce2 = TCallableSink() and + (config.isSink(n) or config.isSink(n, _)) and + ce1 = TCallable(getNodeEnclosingCallable(n), config) + ) + } + + private predicate callableExtStepRev(TCallableExt ce1, TCallableExt ce2) { + callableExtStepFwd(ce2, ce1) + } + + private int distSrcExt(TCallableExt c) = + shortestDistances(callableExtSrc/1, callableExtStepFwd/2)(_, c, result) + + private int distSinkExt(TCallableExt c) = + shortestDistances(callableExtSink/1, callableExtStepRev/2)(_, c, result) + + private int distSrc(DataFlowCallable c, Configuration config) { + result = distSrcExt(TCallable(c, config)) - 1 + } + + private int distSink(DataFlowCallable c, Configuration config) { + result = distSinkExt(TCallable(c, config)) - 1 + } + + private newtype TPartialAccessPath = + TPartialNil(DataFlowType t) or + TPartialCons(TypedContent tc, int len) { len in [1 .. accessPathLimit()] } + + /** + * Conceptually a list of `TypedContent`s followed by a `Type`, but only the first + * element of the list and its length are tracked. If data flows from a source to + * a given node with a given `AccessPath`, this indicates the sequence of + * dereference operations needed to get from the value in the node to the + * tracked object. The final type indicates the type of the tracked object. + */ + private class PartialAccessPath extends TPartialAccessPath { + abstract string toString(); + + TypedContent getHead() { this = TPartialCons(result, _) } + + int len() { + this = TPartialNil(_) and result = 0 + or + this = TPartialCons(_, result) + } + + DataFlowType getType() { + this = TPartialNil(result) + or + exists(TypedContent head | this = TPartialCons(head, _) | result = head.getContainerType()) + } + } + + private class PartialAccessPathNil extends PartialAccessPath, TPartialNil { + override string toString() { + exists(DataFlowType t | this = TPartialNil(t) | result = concat(": " + ppReprType(t))) + } + } + + private class PartialAccessPathCons extends PartialAccessPath, TPartialCons { + override string toString() { + exists(TypedContent tc, int len | this = TPartialCons(tc, len) | + if len = 1 + then result = "[" + tc.toString() + "]" + else result = "[" + tc.toString() + ", ... (" + len.toString() + ")]" + ) + } + } + + private newtype TRevPartialAccessPath = + TRevPartialNil() or + TRevPartialCons(Content c, int len) { len in [1 .. accessPathLimit()] } + + /** + * Conceptually a list of `Content`s, but only the first + * element of the list and its length are tracked. + */ + private class RevPartialAccessPath extends TRevPartialAccessPath { + abstract string toString(); + + Content getHead() { this = TRevPartialCons(result, _) } + + int len() { + this = TRevPartialNil() and result = 0 + or + this = TRevPartialCons(_, result) + } + } + + private class RevPartialAccessPathNil extends RevPartialAccessPath, TRevPartialNil { + override string toString() { result = "" } + } + + private class RevPartialAccessPathCons extends RevPartialAccessPath, TRevPartialCons { + override string toString() { + exists(Content c, int len | this = TRevPartialCons(c, len) | + if len = 1 + then result = "[" + c.toString() + "]" + else result = "[" + c.toString() + ", ... (" + len.toString() + ")]" + ) + } + } + + private predicate relevantState(FlowState state) { + sourceNode(_, state, _) or + sinkNode(_, state, _) or + additionalLocalStateStep(_, state, _, _, _) or + additionalLocalStateStep(_, _, _, state, _) or + additionalJumpStateStep(_, state, _, _, _) or + additionalJumpStateStep(_, _, _, state, _) + } + + private newtype TSummaryCtx1 = + TSummaryCtx1None() or + TSummaryCtx1Param(ParamNodeEx p) + + private newtype TSummaryCtx2 = + TSummaryCtx2None() or + TSummaryCtx2Some(FlowState s) { relevantState(s) } + + private newtype TSummaryCtx3 = + TSummaryCtx3None() or + TSummaryCtx3Some(PartialAccessPath ap) + + private newtype TRevSummaryCtx1 = + TRevSummaryCtx1None() or + TRevSummaryCtx1Some(ReturnPosition pos) + + private newtype TRevSummaryCtx2 = + TRevSummaryCtx2None() or + TRevSummaryCtx2Some(FlowState s) { relevantState(s) } + + private newtype TRevSummaryCtx3 = + TRevSummaryCtx3None() or + TRevSummaryCtx3Some(RevPartialAccessPath ap) + + private newtype TPartialPathNode = + TPartialPathNodeFwd( + NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, + TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config + ) { + sourceNode(node, state, config) and + cc instanceof CallContextAny and + sc1 = TSummaryCtx1None() and + sc2 = TSummaryCtx2None() and + sc3 = TSummaryCtx3None() and + ap = TPartialNil(node.getDataFlowType()) and + exists(config.explorationLimit()) + or + partialPathNodeMk0(node, state, cc, sc1, sc2, sc3, ap, config) and + distSrc(node.getEnclosingCallable(), config) <= config.explorationLimit() + } or + TPartialPathNodeRev( + NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2, TRevSummaryCtx3 sc3, + RevPartialAccessPath ap, Configuration config + ) { + sinkNode(node, state, config) and + sc1 = TRevSummaryCtx1None() and + sc2 = TRevSummaryCtx2None() and + sc3 = TRevSummaryCtx3None() and + ap = TRevPartialNil() and + exists(config.explorationLimit()) + or + revPartialPathStep(_, node, state, sc1, sc2, sc3, ap, config) and + not clearsContentEx(node, ap.getHead()) and + ( + notExpectsContent(node) or + expectsContentEx(node, ap.getHead()) + ) and + not fullBarrier(node, config) and + not stateBarrier(node, state, config) and + distSink(node.getEnclosingCallable(), config) <= config.explorationLimit() + } + + pragma[nomagic] + private predicate partialPathNodeMk0( + NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, + TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config + ) { + partialPathStep(_, node, state, cc, sc1, sc2, sc3, ap, config) and + not fullBarrier(node, config) and + not stateBarrier(node, state, config) and + not clearsContentEx(node, ap.getHead().getContent()) and + ( + notExpectsContent(node) or + expectsContentEx(node, ap.getHead().getContent()) + ) and + if node.asNode() instanceof CastingNode + then compatibleTypes(node.getDataFlowType(), ap.getType()) + else any() + } + + /** + * A `Node` augmented with a call context, an access path, and a configuration. + */ + class PartialPathNode extends TPartialPathNode { + /** Gets a textual representation of this element. */ + string toString() { result = this.getNodeEx().toString() + this.ppAp() } + + /** + * Gets a textual representation of this element, including a textual + * representation of the call context. + */ + string toStringWithContext() { + result = this.getNodeEx().toString() + this.ppAp() + this.ppCtx() + } + + /** + * Holds if this element is at the specified location. + * The location spans column `startcolumn` of line `startline` to + * column `endcolumn` of line `endline` in file `filepath`. + * For more information, see + * [Locations](https://codeql.github.com/docs/writing-codeql-queries/providing-locations-in-codeql-queries/). + */ + predicate hasLocationInfo( + string filepath, int startline, int startcolumn, int endline, int endcolumn + ) { + this.getNodeEx().hasLocationInfo(filepath, startline, startcolumn, endline, endcolumn) + } + + /** Gets the underlying `Node`. */ + final Node getNode() { this.getNodeEx().projectToNode() = result } + + FlowState getState() { none() } + + private NodeEx getNodeEx() { + result = this.(PartialPathNodeFwd).getNodeEx() or + result = this.(PartialPathNodeRev).getNodeEx() + } + + /** Gets the associated configuration. */ + Configuration getConfiguration() { none() } + + /** Gets a successor of this node, if any. */ + PartialPathNode getASuccessor() { none() } + + /** + * Gets the approximate distance to the nearest source measured in number + * of interprocedural steps. + */ + int getSourceDistance() { + result = distSrc(this.getNodeEx().getEnclosingCallable(), this.getConfiguration()) + } + + /** + * Gets the approximate distance to the nearest sink measured in number + * of interprocedural steps. + */ + int getSinkDistance() { + result = distSink(this.getNodeEx().getEnclosingCallable(), this.getConfiguration()) + } + + private string ppAp() { + exists(string s | + s = this.(PartialPathNodeFwd).getAp().toString() or + s = this.(PartialPathNodeRev).getAp().toString() + | + if s = "" then result = "" else result = " " + s + ) + } + + private string ppCtx() { + result = " <" + this.(PartialPathNodeFwd).getCallContext().toString() + ">" + } + + /** Holds if this is a source in a forward-flow path. */ + predicate isFwdSource() { this.(PartialPathNodeFwd).isSource() } + + /** Holds if this is a sink in a reverse-flow path. */ + predicate isRevSink() { this.(PartialPathNodeRev).isSink() } + } + + /** + * Provides the query predicates needed to include a graph in a path-problem query. + */ + module PartialPathGraph { + /** Holds if `(a,b)` is an edge in the graph of data flow path explanations. */ + query predicate edges(PartialPathNode a, PartialPathNode b) { a.getASuccessor() = b } + } + + private class PartialPathNodeFwd extends PartialPathNode, TPartialPathNodeFwd { + NodeEx node; + FlowState state; + CallContext cc; + TSummaryCtx1 sc1; + TSummaryCtx2 sc2; + TSummaryCtx3 sc3; + PartialAccessPath ap; + Configuration config; + + PartialPathNodeFwd() { this = TPartialPathNodeFwd(node, state, cc, sc1, sc2, sc3, ap, config) } + + NodeEx getNodeEx() { result = node } + + override FlowState getState() { result = state } + + CallContext getCallContext() { result = cc } + + TSummaryCtx1 getSummaryCtx1() { result = sc1 } + + TSummaryCtx2 getSummaryCtx2() { result = sc2 } + + TSummaryCtx3 getSummaryCtx3() { result = sc3 } + + PartialAccessPath getAp() { result = ap } + + override Configuration getConfiguration() { result = config } + + override PartialPathNodeFwd getASuccessor() { + partialPathStep(this, result.getNodeEx(), result.getState(), result.getCallContext(), + result.getSummaryCtx1(), result.getSummaryCtx2(), result.getSummaryCtx3(), result.getAp(), + result.getConfiguration()) + } + + predicate isSource() { + sourceNode(node, state, config) and + cc instanceof CallContextAny and + sc1 = TSummaryCtx1None() and + sc2 = TSummaryCtx2None() and + sc3 = TSummaryCtx3None() and + ap instanceof TPartialNil + } + } + + private class PartialPathNodeRev extends PartialPathNode, TPartialPathNodeRev { + NodeEx node; + FlowState state; + TRevSummaryCtx1 sc1; + TRevSummaryCtx2 sc2; + TRevSummaryCtx3 sc3; + RevPartialAccessPath ap; + Configuration config; + + PartialPathNodeRev() { this = TPartialPathNodeRev(node, state, sc1, sc2, sc3, ap, config) } + + NodeEx getNodeEx() { result = node } + + override FlowState getState() { result = state } + + TRevSummaryCtx1 getSummaryCtx1() { result = sc1 } + + TRevSummaryCtx2 getSummaryCtx2() { result = sc2 } + + TRevSummaryCtx3 getSummaryCtx3() { result = sc3 } + + RevPartialAccessPath getAp() { result = ap } + + override Configuration getConfiguration() { result = config } + + override PartialPathNodeRev getASuccessor() { + revPartialPathStep(result, this.getNodeEx(), this.getState(), this.getSummaryCtx1(), + this.getSummaryCtx2(), this.getSummaryCtx3(), this.getAp(), this.getConfiguration()) + } + + predicate isSink() { + sinkNode(node, state, config) and + sc1 = TRevSummaryCtx1None() and + sc2 = TRevSummaryCtx2None() and + sc3 = TRevSummaryCtx3None() and + ap = TRevPartialNil() + } + } + + private predicate partialPathStep( + PartialPathNodeFwd mid, NodeEx node, FlowState state, CallContext cc, TSummaryCtx1 sc1, + TSummaryCtx2 sc2, TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config + ) { + not isUnreachableInCallCached(node.asNode(), cc.(CallContextSpecificCall).getCall()) and + ( + localFlowStep(mid.getNodeEx(), node, config) and + state = mid.getState() and + cc = mid.getCallContext() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + ap = mid.getAp() and + config = mid.getConfiguration() + or + additionalLocalFlowStep(mid.getNodeEx(), node, config) and + state = mid.getState() and + cc = mid.getCallContext() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + mid.getAp() instanceof PartialAccessPathNil and + ap = TPartialNil(node.getDataFlowType()) and + config = mid.getConfiguration() + or + additionalLocalStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and + cc = mid.getCallContext() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + mid.getAp() instanceof PartialAccessPathNil and + ap = TPartialNil(node.getDataFlowType()) and + config = mid.getConfiguration() + ) + or + jumpStep(mid.getNodeEx(), node, config) and + state = mid.getState() and + cc instanceof CallContextAny and + sc1 = TSummaryCtx1None() and + sc2 = TSummaryCtx2None() and + sc3 = TSummaryCtx3None() and + ap = mid.getAp() and + config = mid.getConfiguration() + or + additionalJumpStep(mid.getNodeEx(), node, config) and + state = mid.getState() and + cc instanceof CallContextAny and + sc1 = TSummaryCtx1None() and + sc2 = TSummaryCtx2None() and + sc3 = TSummaryCtx3None() and + mid.getAp() instanceof PartialAccessPathNil and + ap = TPartialNil(node.getDataFlowType()) and + config = mid.getConfiguration() + or + additionalJumpStateStep(mid.getNodeEx(), mid.getState(), node, state, config) and + cc instanceof CallContextAny and + sc1 = TSummaryCtx1None() and + sc2 = TSummaryCtx2None() and + sc3 = TSummaryCtx3None() and + mid.getAp() instanceof PartialAccessPathNil and + ap = TPartialNil(node.getDataFlowType()) and + config = mid.getConfiguration() + or + partialPathStoreStep(mid, _, _, node, ap) and + state = mid.getState() and + cc = mid.getCallContext() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + config = mid.getConfiguration() + or + exists(PartialAccessPath ap0, TypedContent tc | + partialPathReadStep(mid, ap0, tc, node, cc, config) and + state = mid.getState() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + apConsFwd(ap, tc, ap0, config) + ) + or + partialPathIntoCallable(mid, node, state, _, cc, sc1, sc2, sc3, _, ap, config) + or + partialPathOutOfCallable(mid, node, state, cc, ap, config) and + sc1 = TSummaryCtx1None() and + sc2 = TSummaryCtx2None() and + sc3 = TSummaryCtx3None() + or + partialPathThroughCallable(mid, node, state, cc, ap, config) and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() + } + + bindingset[result, i] + private int unbindInt(int i) { pragma[only_bind_out](i) = pragma[only_bind_out](result) } + + pragma[inline] + private predicate partialPathStoreStep( + PartialPathNodeFwd mid, PartialAccessPath ap1, TypedContent tc, NodeEx node, + PartialAccessPath ap2 + ) { + exists(NodeEx midNode, DataFlowType contentType | + midNode = mid.getNodeEx() and + ap1 = mid.getAp() and + store(midNode, tc, node, contentType, mid.getConfiguration()) and + ap2.getHead() = tc and + ap2.len() = unbindInt(ap1.len() + 1) and + compatibleTypes(ap1.getType(), contentType) + ) + } + + pragma[nomagic] + private predicate apConsFwd( + PartialAccessPath ap1, TypedContent tc, PartialAccessPath ap2, Configuration config + ) { + exists(PartialPathNodeFwd mid | + partialPathStoreStep(mid, ap1, tc, _, ap2) and + config = mid.getConfiguration() + ) + } + + pragma[nomagic] + private predicate partialPathReadStep( + PartialPathNodeFwd mid, PartialAccessPath ap, TypedContent tc, NodeEx node, CallContext cc, + Configuration config + ) { + exists(NodeEx midNode | + midNode = mid.getNodeEx() and + ap = mid.getAp() and + read(midNode, tc.getContent(), node, pragma[only_bind_into](config)) and + ap.getHead() = tc and + pragma[only_bind_into](config) = mid.getConfiguration() and + cc = mid.getCallContext() + ) + } + + private predicate partialPathOutOfCallable0( + PartialPathNodeFwd mid, ReturnPosition pos, FlowState state, CallContext innercc, + PartialAccessPath ap, Configuration config + ) { + pos = mid.getNodeEx().(RetNodeEx).getReturnPosition() and + state = mid.getState() and + innercc = mid.getCallContext() and + innercc instanceof CallContextNoCall and + ap = mid.getAp() and + config = mid.getConfiguration() + } + + pragma[nomagic] + private predicate partialPathOutOfCallable1( + PartialPathNodeFwd mid, DataFlowCall call, ReturnKindExt kind, FlowState state, CallContext cc, + PartialAccessPath ap, Configuration config + ) { + exists(ReturnPosition pos, DataFlowCallable c, CallContext innercc | + partialPathOutOfCallable0(mid, pos, state, innercc, ap, config) and + c = pos.getCallable() and + kind = pos.getKind() and + resolveReturn(innercc, c, call) + | + if reducedViableImplInReturn(c, call) then cc = TReturn(c, call) else cc = TAnyCallContext() + ) + } + + private predicate partialPathOutOfCallable( + PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap, + Configuration config + ) { + exists(ReturnKindExt kind, DataFlowCall call | + partialPathOutOfCallable1(mid, call, kind, state, cc, ap, config) + | + out.asNode() = kind.getAnOutNode(call) + ) + } + + pragma[noinline] + private predicate partialPathIntoArg( + PartialPathNodeFwd mid, ParameterPosition ppos, FlowState state, CallContext cc, + DataFlowCall call, PartialAccessPath ap, Configuration config + ) { + exists(ArgNode arg, ArgumentPosition apos | + arg = mid.getNodeEx().asNode() and + state = mid.getState() and + cc = mid.getCallContext() and + arg.argumentOf(call, apos) and + ap = mid.getAp() and + config = mid.getConfiguration() and + parameterMatch(ppos, apos) + ) + } + + pragma[nomagic] + private predicate partialPathIntoCallable0( + PartialPathNodeFwd mid, DataFlowCallable callable, ParameterPosition pos, FlowState state, + CallContext outercc, DataFlowCall call, PartialAccessPath ap, Configuration config + ) { + partialPathIntoArg(mid, pos, state, outercc, call, ap, config) and + callable = resolveCall(call, outercc) + } + + private predicate partialPathIntoCallable( + PartialPathNodeFwd mid, ParamNodeEx p, FlowState state, CallContext outercc, + CallContextCall innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3, + DataFlowCall call, PartialAccessPath ap, Configuration config + ) { + exists(ParameterPosition pos, DataFlowCallable callable | + partialPathIntoCallable0(mid, callable, pos, state, outercc, call, ap, config) and + p.isParameterOf(callable, pos) and + sc1 = TSummaryCtx1Param(p) and + sc2 = TSummaryCtx2Some(state) and + sc3 = TSummaryCtx3Some(ap) + | + if recordDataFlowCallSite(call, callable) + then innercc = TSpecificCall(call) + else innercc = TSomeCall() + ) + } + + pragma[nomagic] + private predicate paramFlowsThroughInPartialPath( + ReturnKindExt kind, FlowState state, CallContextCall cc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, + TSummaryCtx3 sc3, PartialAccessPath ap, Configuration config + ) { + exists(PartialPathNodeFwd mid, RetNodeEx ret | + mid.getNodeEx() = ret and + kind = ret.getKind() and + state = mid.getState() and + cc = mid.getCallContext() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + config = mid.getConfiguration() and + ap = mid.getAp() + ) + } + + pragma[noinline] + private predicate partialPathThroughCallable0( + DataFlowCall call, PartialPathNodeFwd mid, ReturnKindExt kind, FlowState state, CallContext cc, + PartialAccessPath ap, Configuration config + ) { + exists(CallContext innercc, TSummaryCtx1 sc1, TSummaryCtx2 sc2, TSummaryCtx3 sc3 | + partialPathIntoCallable(mid, _, _, cc, innercc, sc1, sc2, sc3, call, _, config) and + paramFlowsThroughInPartialPath(kind, state, innercc, sc1, sc2, sc3, ap, config) + ) + } + + private predicate partialPathThroughCallable( + PartialPathNodeFwd mid, NodeEx out, FlowState state, CallContext cc, PartialAccessPath ap, + Configuration config + ) { + exists(DataFlowCall call, ReturnKindExt kind | + partialPathThroughCallable0(call, mid, kind, state, cc, ap, config) and + out.asNode() = kind.getAnOutNode(call) + ) + } + + pragma[nomagic] + private predicate revPartialPathStep( + PartialPathNodeRev mid, NodeEx node, FlowState state, TRevSummaryCtx1 sc1, TRevSummaryCtx2 sc2, + TRevSummaryCtx3 sc3, RevPartialAccessPath ap, Configuration config + ) { + localFlowStep(node, mid.getNodeEx(), config) and + state = mid.getState() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + ap = mid.getAp() and + config = mid.getConfiguration() + or + additionalLocalFlowStep(node, mid.getNodeEx(), config) and + state = mid.getState() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + mid.getAp() instanceof RevPartialAccessPathNil and + ap = TRevPartialNil() and + config = mid.getConfiguration() + or + additionalLocalStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + mid.getAp() instanceof RevPartialAccessPathNil and + ap = TRevPartialNil() and + config = mid.getConfiguration() + or + jumpStep(node, mid.getNodeEx(), config) and + state = mid.getState() and + sc1 = TRevSummaryCtx1None() and + sc2 = TRevSummaryCtx2None() and + sc3 = TRevSummaryCtx3None() and + ap = mid.getAp() and + config = mid.getConfiguration() + or + additionalJumpStep(node, mid.getNodeEx(), config) and + state = mid.getState() and + sc1 = TRevSummaryCtx1None() and + sc2 = TRevSummaryCtx2None() and + sc3 = TRevSummaryCtx3None() and + mid.getAp() instanceof RevPartialAccessPathNil and + ap = TRevPartialNil() and + config = mid.getConfiguration() + or + additionalJumpStateStep(node, state, mid.getNodeEx(), mid.getState(), config) and + sc1 = TRevSummaryCtx1None() and + sc2 = TRevSummaryCtx2None() and + sc3 = TRevSummaryCtx3None() and + mid.getAp() instanceof RevPartialAccessPathNil and + ap = TRevPartialNil() and + config = mid.getConfiguration() + or + revPartialPathReadStep(mid, _, _, node, ap) and + state = mid.getState() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + config = mid.getConfiguration() + or + exists(RevPartialAccessPath ap0, Content c | + revPartialPathStoreStep(mid, ap0, c, node, config) and + state = mid.getState() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + apConsRev(ap, c, ap0, config) + ) + or + exists(ParamNodeEx p | + mid.getNodeEx() = p and + viableParamArgEx(_, p, node) and + state = mid.getState() and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + sc1 = TRevSummaryCtx1None() and + sc2 = TRevSummaryCtx2None() and + sc3 = TRevSummaryCtx3None() and + ap = mid.getAp() and + config = mid.getConfiguration() + ) + or + exists(ReturnPosition pos | + revPartialPathIntoReturn(mid, pos, state, sc1, sc2, sc3, _, ap, config) and + pos = getReturnPosition(node.asNode()) + ) + or + revPartialPathThroughCallable(mid, node, state, ap, config) and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() + } + + pragma[inline] + private predicate revPartialPathReadStep( + PartialPathNodeRev mid, RevPartialAccessPath ap1, Content c, NodeEx node, + RevPartialAccessPath ap2 + ) { + exists(NodeEx midNode | + midNode = mid.getNodeEx() and + ap1 = mid.getAp() and + read(node, c, midNode, mid.getConfiguration()) and + ap2.getHead() = c and + ap2.len() = unbindInt(ap1.len() + 1) + ) + } + + pragma[nomagic] + private predicate apConsRev( + RevPartialAccessPath ap1, Content c, RevPartialAccessPath ap2, Configuration config + ) { + exists(PartialPathNodeRev mid | + revPartialPathReadStep(mid, ap1, c, _, ap2) and + config = mid.getConfiguration() + ) + } + + pragma[nomagic] + private predicate revPartialPathStoreStep( + PartialPathNodeRev mid, RevPartialAccessPath ap, Content c, NodeEx node, Configuration config + ) { + exists(NodeEx midNode, TypedContent tc | + midNode = mid.getNodeEx() and + ap = mid.getAp() and + store(node, tc, midNode, _, config) and + ap.getHead() = c and + config = mid.getConfiguration() and + tc.getContent() = c + ) + } + + pragma[nomagic] + private predicate revPartialPathIntoReturn( + PartialPathNodeRev mid, ReturnPosition pos, FlowState state, TRevSummaryCtx1Some sc1, + TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3, DataFlowCall call, RevPartialAccessPath ap, + Configuration config + ) { + exists(NodeEx out | + mid.getNodeEx() = out and + mid.getState() = state and + viableReturnPosOutEx(call, pos, out) and + sc1 = TRevSummaryCtx1Some(pos) and + sc2 = TRevSummaryCtx2Some(state) and + sc3 = TRevSummaryCtx3Some(ap) and + ap = mid.getAp() and + config = mid.getConfiguration() + ) + } + + pragma[nomagic] + private predicate revPartialPathFlowsThrough( + ArgumentPosition apos, FlowState state, TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2, + TRevSummaryCtx3Some sc3, RevPartialAccessPath ap, Configuration config + ) { + exists(PartialPathNodeRev mid, ParamNodeEx p, ParameterPosition ppos | + mid.getNodeEx() = p and + mid.getState() = state and + p.getPosition() = ppos and + sc1 = mid.getSummaryCtx1() and + sc2 = mid.getSummaryCtx2() and + sc3 = mid.getSummaryCtx3() and + ap = mid.getAp() and + config = mid.getConfiguration() and + parameterMatch(ppos, apos) + ) + } + + pragma[nomagic] + private predicate revPartialPathThroughCallable0( + DataFlowCall call, PartialPathNodeRev mid, ArgumentPosition pos, FlowState state, + RevPartialAccessPath ap, Configuration config + ) { + exists(TRevSummaryCtx1Some sc1, TRevSummaryCtx2Some sc2, TRevSummaryCtx3Some sc3 | + revPartialPathIntoReturn(mid, _, _, sc1, sc2, sc3, call, _, config) and + revPartialPathFlowsThrough(pos, state, sc1, sc2, sc3, ap, config) + ) + } + + pragma[nomagic] + private predicate revPartialPathThroughCallable( + PartialPathNodeRev mid, ArgNodeEx node, FlowState state, RevPartialAccessPath ap, + Configuration config + ) { + exists(DataFlowCall call, ArgumentPosition pos | + revPartialPathThroughCallable0(call, mid, pos, state, ap, config) and + node.asNode().(ArgNode).argumentOf(call, pos) + ) + } +} + +import FlowExploration + +private predicate partialFlow( + PartialPathNode source, PartialPathNode node, Configuration configuration +) { + source.getConfiguration() = configuration and + source.isFwdSource() and + node = source.getASuccessor+() +} + +private predicate revPartialFlow( + PartialPathNode node, PartialPathNode sink, Configuration configuration +) { + sink.getConfiguration() = configuration and + sink.isRevSink() and + node.getASuccessor+() = sink +} diff --git a/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImpl.qll b/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImpl.qll index d722aa68b70..85ffeb62e5f 100644 --- a/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImpl.qll +++ b/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImpl.qll @@ -39,6 +39,11 @@ module Public { ) or exists(ReturnKind rk | this = TReturnSummaryComponent(rk) and result = "return (" + rk + ")") + or + exists(SummaryComponent::SyntheticGlobal sg | + this = TSyntheticGlobalSummaryComponent(sg) and + result = "synthetic global (" + sg + ")" + ) } } @@ -159,24 +164,24 @@ module Public { SummaryComponentStack return(ReturnKind rk) { result = singleton(SummaryComponent::return(rk)) } } - private predicate noComponentSpecificCsv(SummaryComponent sc) { - not exists(getComponentSpecificCsv(sc)) + private predicate noComponentSpecific(SummaryComponent sc) { + not exists(getComponentSpecific(sc)) } /** Gets a textual representation of this component used for flow summaries. */ - private string getComponentCsv(SummaryComponent sc) { - result = getComponentSpecificCsv(sc) + private string getComponent(SummaryComponent sc) { + result = getComponentSpecific(sc) or - noComponentSpecificCsv(sc) and + noComponentSpecific(sc) and ( exists(ArgumentPosition pos | sc = TParameterSummaryComponent(pos) and - result = "Parameter[" + getArgumentPositionCsv(pos) + "]" + result = "Parameter[" + getArgumentPosition(pos) + "]" ) or exists(ParameterPosition pos | sc = TArgumentSummaryComponent(pos) and - result = "Argument[" + getParameterPositionCsv(pos) + "]" + result = "Argument[" + getParameterPosition(pos) + "]" ) or sc = TReturnSummaryComponent(getReturnValueKind()) and result = "ReturnValue" @@ -184,16 +189,16 @@ module Public { } /** Gets a textual representation of this stack used for flow summaries. */ - string getComponentStackCsv(SummaryComponentStack stack) { + string getComponentStack(SummaryComponentStack stack) { exists(SummaryComponent head, SummaryComponentStack tail | head = stack.head() and tail = stack.tail() and - result = getComponentStackCsv(tail) + "." + getComponentCsv(head) + result = getComponentStack(tail) + "." + getComponent(head) ) or exists(SummaryComponent c | stack = TSingletonSummaryComponentStack(c) and - result = getComponentCsv(c) + result = getComponent(c) ) } @@ -241,15 +246,19 @@ module Public { } /** - * Holds if the summary is auto generated and not manually generated. + * Holds if all the summaries that apply to `this` are auto generated and not manually created. */ - predicate isAutoGenerated() { none() } + final predicate isAutoGenerated() { this.hasProvenance("generated") and not this.isManual() } /** - * Holds if the summary has the given provenance where `true` is - * `generated` and `false` is `manual`. + * Holds if there exists a manual summary that applies to `this`. */ - predicate hasProvenance(boolean generated) { none() } + final predicate isManual() { this.hasProvenance("manual") } + + /** + * Holds if there exists a summary that applies to `this` that has provenance `provenance`. + */ + predicate hasProvenance(string provenance) { none() } } /** A callable where there is no flow via the callable. */ @@ -257,15 +266,19 @@ module Public { NeutralCallable() { neutralElement(this, _) } /** - * Holds if the neutral is auto generated. + * Holds if the neutral is auto generated. */ - predicate isAutoGenerated() { neutralElement(this, true) } + predicate isAutoGenerated() { neutralElement(this, "generated") } /** - * Holds if the neutral has the given provenance where `true` is - * `generated` and `false` is `manual`. + * Holds if there exists a manual neutral that applies to `this`. */ - predicate hasProvenance(boolean generated) { neutralElement(this, generated) } + final predicate isManual() { this.hasProvenance("manual") } + + /** + * Holds if the neutral has provenance `provenance`. + */ + predicate hasProvenance(string provenance) { neutralElement(this, provenance) } } } @@ -997,12 +1010,12 @@ module Private { private predicate relevantSummaryElementGenerated( AccessPath inSpec, AccessPath outSpec, string kind ) { - summaryElement(this, inSpec, outSpec, kind, true) and - not summaryElement(this, _, _, _, false) + summaryElement(this, inSpec, outSpec, kind, "generated") and + not summaryElement(this, _, _, _, "manual") } private predicate relevantSummaryElement(AccessPath inSpec, AccessPath outSpec, string kind) { - summaryElement(this, inSpec, outSpec, kind, false) + summaryElement(this, inSpec, outSpec, kind, "manual") or this.relevantSummaryElementGenerated(inSpec, outSpec, kind) } @@ -1021,10 +1034,8 @@ module Private { ) } - override predicate isAutoGenerated() { this.relevantSummaryElementGenerated(_, _, _) } - - override predicate hasProvenance(boolean generated) { - summaryElement(this, _, _, _, generated) + override predicate hasProvenance(string provenance) { + summaryElement(this, _, _, _, provenance) } } @@ -1211,8 +1222,8 @@ module Private { c.relevantSummary(input, output, preservesValue) and csv = c.getCallableCsv() // Callable information - + getComponentStackCsv(input) + ";" // input - + getComponentStackCsv(output) + ";" // output + + getComponentStack(input) + ";" // input + + getComponentStack(output) + ";" // output + renderKind(preservesValue) + ";" // kind + renderProvenance(c) // provenance ) diff --git a/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImplSpecific.qll b/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImplSpecific.qll index fd82938968a..b71e1ae713d 100644 --- a/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImplSpecific.qll +++ b/go/ql/lib/semmle/go/dataflow/internal/FlowSummaryImplSpecific.qll @@ -23,10 +23,10 @@ DataFlowCallable inject(SummarizedCallable c) { result.asCallable() = c } ArgumentPosition instanceParameterPosition() { result = -1 } /** Gets the textual representation of a parameter position in the format used for flow summaries. */ -string getParameterPositionCsv(ParameterPosition pos) { result = pos.toString() } +string getParameterPosition(ParameterPosition pos) { result = pos.toString() } /** Gets the textual representation of an argument position in the format used for flow summaries. */ -string getArgumentPositionCsv(ArgumentPosition pos) { result = pos.toString() } +string getArgumentPosition(ArgumentPosition pos) { result = pos.toString() } Node summaryNode(SummarizedCallable c, SummaryNodeState state) { result = getSummaryNode(c, state) } @@ -60,26 +60,23 @@ DataFlowType getSyntheticGlobalType(SummaryComponent::SyntheticGlobal sg) { any( /** * Holds if an external flow summary exists for `c` with input specification - * `input`, output specification `output`, kind `kind`, and a flag `generated` - * stating whether the summary is autogenerated. + * `input`, output specification `output`, kind `kind`, and provenance `provenance`. */ predicate summaryElement( - SummarizedCallableBase c, string input, string output, string kind, boolean generated + SummarizedCallableBase c, string input, string output, string kind, string provenance ) { - exists( - string namespace, string type, boolean subtypes, string name, string signature, string ext - | - summaryModel(namespace, type, subtypes, name, signature, ext, input, output, kind, generated) and - c.asFunction() = interpretElement(namespace, type, subtypes, name, signature, ext).asEntity() + exists(string package, string type, boolean subtypes, string name, string signature, string ext | + summaryModel(package, type, subtypes, name, signature, ext, input, output, kind, provenance) and + c.asFunction() = interpretElement(package, type, subtypes, name, signature, ext).asEntity() ) } /** - * Holds if a neutral model exists for `c`, which means that there is no - * flow through `c`. The flag `generated` states whether the model is autogenerated. + * Holds if a neutral model exists for `c` with provenance `provenance`, + * which means that there is no flow through `c`. * Note. Neutral models have not been implemented for Go. */ -predicate neutralElement(SummarizedCallable c, boolean generated) { none() } +predicate neutralElement(SummarizedCallable c, string provenance) { none() } /** Gets the summary component for specification component `c`, if any. */ bindingset[c] @@ -90,7 +87,7 @@ SummaryComponent interpretComponentSpecific(string c) { } /** Gets the summary component for specification component `c`, if any. */ -private string getContentSpecificCsv(Content c) { +private string getContentSpecific(Content c) { exists(Field f, string package, string className, string fieldName | f = c.(FieldContent).getField() and f.hasQualifiedName(package, className, fieldName) and @@ -111,8 +108,8 @@ private string getContentSpecificCsv(Content c) { } /** Gets the textual representation of the content in the format used for flow summaries. */ -string getComponentSpecificCsv(SummaryComponent sc) { - exists(Content c | sc = TContentSummaryComponent(c) and result = getContentSpecificCsv(c)) +string getComponentSpecific(SummaryComponent sc) { + exists(Content c | sc = TContentSummaryComponent(c) and result = getContentSpecific(c)) or exists(ReturnKind rk, int n | n = rk.getIndex() | sc = TReturnSummaryComponent(rk) and @@ -152,29 +149,23 @@ class SourceOrSinkElement extends TSourceOrSinkElement { /** * Holds if an external source specification exists for `e` with output specification - * `output`, kind `kind`, and a flag `generated` stating whether the source specification is - * autogenerated. + * `output`, kind `kind`, and provenance `provenance`. */ -predicate sourceElement(SourceOrSinkElement e, string output, string kind, boolean generated) { - exists( - string namespace, string type, boolean subtypes, string name, string signature, string ext - | - sourceModel(namespace, type, subtypes, name, signature, ext, output, kind, generated) and - e = interpretElement(namespace, type, subtypes, name, signature, ext) +predicate sourceElement(SourceOrSinkElement e, string output, string kind, string provenance) { + exists(string package, string type, boolean subtypes, string name, string signature, string ext | + sourceModel(package, type, subtypes, name, signature, ext, output, kind, provenance) and + e = interpretElement(package, type, subtypes, name, signature, ext) ) } /** * Holds if an external sink specification exists for `e` with input specification - * `input`, kind `kind` and a flag `generated` stating whether the sink specification is - * autogenerated. + * `input`, kind `kind` and provenance `provenance`. */ -predicate sinkElement(SourceOrSinkElement e, string input, string kind, boolean generated) { - exists( - string namespace, string type, boolean subtypes, string name, string signature, string ext - | - sinkModel(namespace, type, subtypes, name, signature, ext, input, kind, generated) and - e = interpretElement(namespace, type, subtypes, name, signature, ext) +predicate sinkElement(SourceOrSinkElement e, string input, string kind, string provenance) { + exists(string package, string type, boolean subtypes, string name, string signature, string ext | + sinkModel(package, type, subtypes, name, signature, ext, input, kind, provenance) and + e = interpretElement(package, type, subtypes, name, signature, ext) ) } diff --git a/go/ql/lib/semmle/go/frameworks/stdlib/ArchiveTar.qll b/go/ql/lib/semmle/go/frameworks/stdlib/ArchiveTar.qll index ef2d3b6446f..81bae84c052 100644 --- a/go/ql/lib/semmle/go/frameworks/stdlib/ArchiveTar.qll +++ b/go/ql/lib/semmle/go/frameworks/stdlib/ArchiveTar.qll @@ -3,13 +3,6 @@ */ import go -private import semmle.go.dataflow.ExternalFlow - -private class FlowSummaries extends SummaryModelCsv { - override predicate row(string row) { - row = ["archive/tar;;true;FileInfoHeader;;;Argument[0];ReturnValue[0];taint"] - } -} /** Provides models of commonly used functions in the `archive/tar` package. */ module ArchiveTar { diff --git a/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll b/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll index e0518ecf465..12eee7079f7 100644 --- a/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll +++ b/go/ql/lib/semmle/go/frameworks/stdlib/NetHttp.qll @@ -3,23 +3,6 @@ */ import go -private import semmle.go.dataflow.ExternalFlow - -private class FlowSources extends SourceModelCsv { - override predicate row(string row) { - row = - [ - "net/http;Request;true;Cookie;;;ReturnValue[0];remote", - "net/http;Request;true;Cookies;;;ReturnValue.ArrayElement;remote", - "net/http;Request;true;FormFile;;;ReturnValue[0..1];remote", - "net/http;Request;true;FormValue;;;ReturnValue;remote", - "net/http;Request;true;MultipartReader;;;ReturnValue[0];remote", - "net/http;Request;true;PostFormValue;;;ReturnValue;remote", - "net/http;Request;true;Referer;;;ReturnValue;remote", - "net/http;Request;true;UserAgent;;;ReturnValue;remote" - ] - } -} /** Provides models of commonly used functions in the `net/http` package. */ module NetHttp { diff --git a/go/ql/lib/semmle/go/security/FlowSources.qll b/go/ql/lib/semmle/go/security/FlowSources.qll index de8fb5c3732..b4d4c4d3187 100644 --- a/go/ql/lib/semmle/go/security/FlowSources.qll +++ b/go/ql/lib/semmle/go/security/FlowSources.qll @@ -23,7 +23,12 @@ module UntrustedFlowSource { */ abstract class Range extends DataFlow::Node { } - class CsvRemoteSource extends Range { - CsvRemoteSource() { ExternalFlow::sourceNode(this, "remote") } + /** + * A source of data that is controlled by an untrusted user. + */ + class MaDRemoteSource extends Range { + MaDRemoteSource() { ExternalFlow::sourceNode(this, "remote") } } + + deprecated class CsvRemoteSource = MaDRemoteSource; } diff --git a/go/ql/lib/semmle/go/security/LogInjectionCustomizations.qll b/go/ql/lib/semmle/go/security/LogInjectionCustomizations.qll index 73d5f4f9a82..cb7a4da5b88 100644 --- a/go/ql/lib/semmle/go/security/LogInjectionCustomizations.qll +++ b/go/ql/lib/semmle/go/security/LogInjectionCustomizations.qll @@ -41,22 +41,12 @@ module LogInjection { } /** - * A call to `strings.Replace` or `strings.ReplaceAll`, considered as a sanitizer - * for log injection. + * An expression that is equivalent to `strings.ReplaceAll(s, old, new)`, + * where `old` is a newline character, considered as a sanitizer for log + * injection. */ - class ReplaceSanitizer extends Sanitizer { - ReplaceSanitizer() { - exists(string name, DataFlow::CallNode call | - this = call and - call.getTarget().hasQualifiedName("strings", name) and - call.getArgument(1).getStringValue().matches("%" + ["\r", "\n"] + "%") - | - name = "Replace" and - call.getArgument(3).getNumericValue() < 0 - or - name = "ReplaceAll" - ) - } + class ReplaceSanitizer extends StringOps::ReplaceAll, Sanitizer { + ReplaceSanitizer() { this.getReplacedString() = ["\r", "\n"] } } /** diff --git a/go/ql/lib/semmle/go/security/StringBreakCustomizations.qll b/go/ql/lib/semmle/go/security/StringBreakCustomizations.qll index c042fbdaa76..60328f89a55 100644 --- a/go/ql/lib/semmle/go/security/StringBreakCustomizations.qll +++ b/go/ql/lib/semmle/go/security/StringBreakCustomizations.qll @@ -84,24 +84,13 @@ module StringBreak { } /** - * A call to `strings.Replace` or `strings.ReplaceAll`, considered as a sanitizer - * for unsafe quoting. + * An expression that is equivalent to `strings.ReplaceAll(s, old, new)`, + * considered as a sanitizer for unsafe quoting. */ - class ReplaceSanitizer extends Sanitizer { + class ReplaceSanitizer extends StringOps::ReplaceAll, Sanitizer { Quote quote; - ReplaceSanitizer() { - exists(string name, DataFlow::CallNode call | - this = call and - call.getTarget().hasQualifiedName("strings", name) and - call.getArgument(1).getStringValue().matches("%" + quote + "%") - | - name = "Replace" and - call.getArgument(3).getNumericValue() < 0 - or - name = "ReplaceAll" - ) - } + ReplaceSanitizer() { this.getReplacedString().matches("%" + quote + "%") } override Quote getQuote() { result = quote } } diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index a57fb3dab13..bfb7bd3a590 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,10 @@ +## 0.4.1 + +### Minor Analysis Improvements + +* Replacing "\r" or "\n" using the functions `strings.ReplaceAll`, `strings.Replace`, `strings.Replacer.Replace` and `strings.Replacer.WriteString` has been added as a sanitizer for the queries "Log entries created from user input". +* The functions `strings.Replacer.Replace` and `strings.Replacer.WriteString` have been added as sanitizers for the query "Potentially unsafe quoting". + ## 0.4.0 ### Minor Analysis Improvements diff --git a/go/ql/src/change-notes/released/0.4.1.md b/go/ql/src/change-notes/released/0.4.1.md new file mode 100644 index 00000000000..027ca847401 --- /dev/null +++ b/go/ql/src/change-notes/released/0.4.1.md @@ -0,0 +1,6 @@ +## 0.4.1 + +### Minor Analysis Improvements + +* Replacing "\r" or "\n" using the functions `strings.ReplaceAll`, `strings.Replace`, `strings.Replacer.Replace` and `strings.Replacer.WriteString` has been added as a sanitizer for the queries "Log entries created from user input". +* The functions `strings.Replacer.Replace` and `strings.Replacer.WriteString` have been added as sanitizers for the query "Potentially unsafe quoting". diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index 458bfbeccff..89fa3a87180 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.4.0 +lastReleaseVersion: 0.4.1 diff --git a/go/ql/src/codeql-suites/go-security-experimental.qls b/go/ql/src/codeql-suites/go-security-experimental.qls new file mode 100644 index 00000000000..ad0bee0fbf5 --- /dev/null +++ b/go/ql/src/codeql-suites/go-security-experimental.qls @@ -0,0 +1,4 @@ +- description: Extended and experimental security queries for Go +- queries: . +- apply: security-experimental-selectors.yml + from: codeql/suite-helpers \ No newline at end of file diff --git a/go/ql/src/experimental/CWE-090/LDAPInjection.ql b/go/ql/src/experimental/CWE-090/LDAPInjection.ql index 48f751b29bd..cdcc38ebd90 100644 --- a/go/ql/src/experimental/CWE-090/LDAPInjection.ql +++ b/go/ql/src/experimental/CWE-090/LDAPInjection.ql @@ -6,6 +6,7 @@ * @problem.severity error * @id go/ldap-injection * @tags security + * experimental * external/cwe/cwe-90 */ diff --git a/go/ql/src/experimental/CWE-1004/CookieWithoutHttpOnly.ql b/go/ql/src/experimental/CWE-1004/CookieWithoutHttpOnly.ql index ff6956a66ef..a16a446fe56 100644 --- a/go/ql/src/experimental/CWE-1004/CookieWithoutHttpOnly.ql +++ b/go/ql/src/experimental/CWE-1004/CookieWithoutHttpOnly.ql @@ -9,6 +9,7 @@ * @precision high * @id go/cookie-httponly-not-set * @tags security + * experimental * external/cwe/cwe-1004 */ diff --git a/go/ql/src/experimental/CWE-285/PamAuthBypass.ql b/go/ql/src/experimental/CWE-285/PamAuthBypass.ql index 4a9d953fc40..3e6864c021f 100644 --- a/go/ql/src/experimental/CWE-285/PamAuthBypass.ql +++ b/go/ql/src/experimental/CWE-285/PamAuthBypass.ql @@ -6,6 +6,7 @@ * @id go/pam-auth-bypass * @tags maintainability * correctness + * experimental * external/cwe/cwe-561 * external/cwe/cwe-285 * @precision very-high diff --git a/go/ql/src/experimental/CWE-321/HardcodedKeys.ql b/go/ql/src/experimental/CWE-321/HardcodedKeys.ql index 06dacfcac27..47851d8b4b9 100644 --- a/go/ql/src/experimental/CWE-321/HardcodedKeys.ql +++ b/go/ql/src/experimental/CWE-321/HardcodedKeys.ql @@ -5,6 +5,7 @@ * @problem.severity error * @id go/hardcoded-key * @tags security + * experimental * external/cwe/cwe-321 */ diff --git a/go/ql/src/experimental/CWE-327/WeakCryptoAlgorithm.ql b/go/ql/src/experimental/CWE-327/WeakCryptoAlgorithm.ql index 36f95c7d394..04a7dae5595 100644 --- a/go/ql/src/experimental/CWE-327/WeakCryptoAlgorithm.ql +++ b/go/ql/src/experimental/CWE-327/WeakCryptoAlgorithm.ql @@ -5,8 +5,9 @@ * @problem.severity error * @id go/weak-crypto-algorithm * @tags security - * external/cwe/cwe-327 - * external/cwe/cwe-328 + * experimental + * external/cwe/cwe-327 + * external/cwe/cwe-328 */ import go diff --git a/go/ql/src/experimental/CWE-369/DivideByZero.ql b/go/ql/src/experimental/CWE-369/DivideByZero.ql index b2e61bef37d..9e48e7f6fc4 100644 --- a/go/ql/src/experimental/CWE-369/DivideByZero.ql +++ b/go/ql/src/experimental/CWE-369/DivideByZero.ql @@ -5,6 +5,7 @@ * @problem.severity error * @id go/divide-by-zero * @tags security + * experimental * external/cwe/cwe-369 */ diff --git a/go/ql/src/experimental/CWE-400/DatabaseCallInLoop.ql b/go/ql/src/experimental/CWE-400/DatabaseCallInLoop.ql index eaabdea1e57..ed02275a33c 100644 --- a/go/ql/src/experimental/CWE-400/DatabaseCallInLoop.ql +++ b/go/ql/src/experimental/CWE-400/DatabaseCallInLoop.ql @@ -6,6 +6,8 @@ * @problem.severity warning * @precision high * @id go/examples/database-call-in-loop + * @tags security + * experimental */ import go diff --git a/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql index 81c2663a3b1..eb6c7668f06 100644 --- a/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql @@ -6,6 +6,7 @@ * @problem.severity warning * @id go/html-template-escaping-passthrough * @tags security + * experimental * external/cwe/cwe-79 */ diff --git a/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.ql b/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.ql index 632e90065e6..5edc839f60c 100644 --- a/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.ql +++ b/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.ql @@ -8,6 +8,8 @@ * @tags external/cwe/cwe-807 * external/cwe/cwe-247 * external/cwe/cwe-350 + * experimental + * security */ import go diff --git a/go/ql/src/experimental/CWE-840/ConditionalBypass.ql b/go/ql/src/experimental/CWE-840/ConditionalBypass.ql index 1776c3a7d87..87bfac1c1d5 100644 --- a/go/ql/src/experimental/CWE-840/ConditionalBypass.ql +++ b/go/ql/src/experimental/CWE-840/ConditionalBypass.ql @@ -6,6 +6,8 @@ * @kind problem * @problem.severity warning * @tags external/cwe/cwe-840 + * security + * experimental */ import go diff --git a/go/ql/src/experimental/CWE-918/SSRF.ql b/go/ql/src/experimental/CWE-918/SSRF.ql index 4c14969c35f..a58ac660385 100644 --- a/go/ql/src/experimental/CWE-918/SSRF.ql +++ b/go/ql/src/experimental/CWE-918/SSRF.ql @@ -6,6 +6,7 @@ * @problem.severity error * @precision high * @tags security + * experimental * external/cwe/cwe-918 */ diff --git a/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql b/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql index 9dd62083df4..007178941f7 100644 --- a/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql +++ b/go/ql/src/experimental/CWE-942/CorsMisconfiguration.ql @@ -7,6 +7,7 @@ * @problem.severity warning * @id go/cors-misconfiguration * @tags security + * experimental * external/cwe/cwe-942 * external/cwe/cwe-346 */ diff --git a/go/ql/src/experimental/Unsafe/WrongUsageOfUnsafe.ql b/go/ql/src/experimental/Unsafe/WrongUsageOfUnsafe.ql index 3dfc90dc40a..607ec2aa11e 100644 --- a/go/ql/src/experimental/Unsafe/WrongUsageOfUnsafe.ql +++ b/go/ql/src/experimental/Unsafe/WrongUsageOfUnsafe.ql @@ -6,6 +6,7 @@ * @problem.severity error * @id go/wrong-usage-of-unsafe * @tags security + * experimental * external/cwe/cwe-119 * external/cwe/cwe-126 */ diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 5369871c288..4fc9bff66a0 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 0.4.1-dev +version: 0.4.2-dev groups: - go - queries diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/completetest.ext.yml b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/completetest.ext.yml new file mode 100644 index 00000000000..79ca023562c --- /dev/null +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/completetest.ext.yml @@ -0,0 +1,38 @@ +extensions: + - addsTo: + pack: codeql/go-all + extensible: summaryModel + data: + - ["github.com/nonexistent/test", "T", False, "StepArgRes", "", "", "Argument[0]", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepArgRes1", "", "", "Argument[0]", "ReturnValue[1]", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepArgArg", "", "", "Argument[0]", "Argument[1]", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepArgQual", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepQualRes", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepQualArg", "", "", "Argument[-1]", "Argument[0]", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgResNoQual", "", "", "Argument[0]", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgResArrayContent", "", "", "Argument[0]", "ReturnValue.ArrayElement", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgArrayContentRes", "", "", "Argument[0].ArrayElement", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgResCollectionContent", "", "", "Argument[0]", "ReturnValue.Element", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgCollectionContentRes", "", "", "Argument[0].Element", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgResMapKeyContent", "", "", "Argument[0]", "ReturnValue.MapKey", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgMapKeyContentRes", "", "", "Argument[0].MapKey", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgResMapValueContent", "", "", "Argument[0]", "ReturnValue.MapValue", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgMapValueContentRes", "", "", "Argument[0].MapValue", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "GetElement", "", "", "Argument[0].Element", "ReturnValue", "value", "manual"] + - ["github.com/nonexistent/test", "", False, "GetMapKey", "", "", "Argument[0].MapKey", "ReturnValue", "value", "manual"] + - ["github.com/nonexistent/test", "", False, "SetElement", "", "", "Argument[0]", "ReturnValue.Element", "value", "manual"] + - ["github.com/nonexistent/test", "C", False, "Get", "", "", "Argument[-1].Field[github.com/nonexistent/test.C.F]", "ReturnValue", "value", "manual"] + - ["github.com/nonexistent/test", "C", False, "Set", "", "", "Argument[0]", "Argument[-1].Field[github.com/nonexistent/test.C.F]", "value", "manual"] + + - addsTo: + pack: codeql/go-all + extensible: sourceModel + data: + - ["github.com/nonexistent/test", "A", False, "Src1", "", "", "ReturnValue", "qltest", "manual"] + + - addsTo: + pack: codeql/go-all + extensible: sinkModel + data: + - ["github.com/nonexistent/test", "B", False, "Sink1", "", "", "Argument[0]", "qltest", "manual"] + - ["github.com/nonexistent/test", "B", False, "SinkManyArgs", "", "", "Argument[0..2]", "qltest", "manual"] diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/completetest.ql b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/completetest.ql index 6554f5c5ec0..9719a9d69a6 100644 --- a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/completetest.ql +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/completetest.ql @@ -4,60 +4,10 @@ import go import semmle.go.dataflow.ExternalFlow -import CsvValidation +import ModelValidation import semmle.go.dataflow.internal.FlowSummaryImpl as FlowSummaryImpl import TestUtilities.InlineFlowTest -class SummaryModelTest extends SummaryModelCsv { - override predicate row(string row) { - row = - [ - //`namespace; type; subtypes; name; signature; ext; input; output; kind` - "github.com/nonexistent/test;T;false;StepArgRes;;;Argument[0];ReturnValue;taint", - "github.com/nonexistent/test;T;false;StepArgRes1;;;Argument[0];ReturnValue[1];taint", - "github.com/nonexistent/test;T;false;StepArgArg;;;Argument[0];Argument[1];taint", - "github.com/nonexistent/test;T;false;StepArgQual;;;Argument[0];Argument[-1];taint", - "github.com/nonexistent/test;T;false;StepQualRes;;;Argument[-1];ReturnValue;taint", - "github.com/nonexistent/test;T;false;StepQualArg;;;Argument[-1];Argument[0];taint", - "github.com/nonexistent/test;;false;StepArgResNoQual;;;Argument[0];ReturnValue;taint", - "github.com/nonexistent/test;;false;StepArgResArrayContent;;;Argument[0];ReturnValue.ArrayElement;taint", - "github.com/nonexistent/test;;false;StepArgArrayContentRes;;;Argument[0].ArrayElement;ReturnValue;taint", - "github.com/nonexistent/test;;false;StepArgResCollectionContent;;;Argument[0];ReturnValue.Element;taint", - "github.com/nonexistent/test;;false;StepArgCollectionContentRes;;;Argument[0].Element;ReturnValue;taint", - "github.com/nonexistent/test;;false;StepArgResMapKeyContent;;;Argument[0];ReturnValue.MapKey;taint", - "github.com/nonexistent/test;;false;StepArgMapKeyContentRes;;;Argument[0].MapKey;ReturnValue;taint", - "github.com/nonexistent/test;;false;StepArgResMapValueContent;;;Argument[0];ReturnValue.MapValue;taint", - "github.com/nonexistent/test;;false;StepArgMapValueContentRes;;;Argument[0].MapValue;ReturnValue;taint", - "github.com/nonexistent/test;;false;GetElement;;;Argument[0].Element;ReturnValue;value", - "github.com/nonexistent/test;;false;GetMapKey;;;Argument[0].MapKey;ReturnValue;value", - "github.com/nonexistent/test;;false;SetElement;;;Argument[0];ReturnValue.Element;value", - "github.com/nonexistent/test;C;false;Get;;;Argument[-1].Field[github.com/nonexistent/test.C.F];ReturnValue;value", - "github.com/nonexistent/test;C;false;Set;;;Argument[0];Argument[-1].Field[github.com/nonexistent/test.C.F];value", - ] - } -} - -class SourceModelTest extends SourceModelCsv { - override predicate row(string row) { - row = - [ - //`namespace; type; subtypes; name; -; ext; output; kind` - "github.com/nonexistent/test;A;false;Src1;;;ReturnValue;qltest" - ] - } -} - -class SinkModelTest extends SinkModelCsv { - override predicate row(string row) { - row = - [ - //`namespace; type; subtypes; name; -; ext; input; kind` - "github.com/nonexistent/test;B;false;Sink1;;;Argument[0];qltest", - "github.com/nonexistent/test;B;false;SinkManyArgs;;;Argument[0..2];qltest" - ] - } -} - class Config extends TaintTracking::Configuration { Config() { this = "external-flow-test" } diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/sinks.ext.yml b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/sinks.ext.yml new file mode 100644 index 00000000000..653f82bae61 --- /dev/null +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/sinks.ext.yml @@ -0,0 +1,8 @@ +extensions: + - addsTo: + pack: codeql/go-all + extensible: sinkModel + data: + - ["github.com/nonexistent/test", "B", False, "Sink1", "", "", "Argument[0]", "qltest", "manual"] + - ["github.com/nonexistent/test", "B", False, "SinkMethod", "", "", "Argument[-1]", "qltest", "manual"] + - ["github.com/nonexistent/test", "B", False, "SinkManyArgs", "", "", "Argument[0..2]", "qltest", "manual"] \ No newline at end of file diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/sinks.ql b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/sinks.ql index a95446246c9..de84cf24e4d 100644 --- a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/sinks.ql +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/sinks.ql @@ -1,18 +1,6 @@ import go import semmle.go.dataflow.ExternalFlow -import CsvValidation - -class SinkModelTest extends SinkModelCsv { - override predicate row(string row) { - row = - [ - //`namespace; type; subtypes; name; -; ext; input; kind` - "github.com/nonexistent/test;B;false;Sink1;;;Argument[0];qltest", - "github.com/nonexistent/test;B;false;SinkMethod;;;Argument[-1];qltest", - "github.com/nonexistent/test;B;false;SinkManyArgs;;;Argument[0..2];qltest", - ] - } -} +import ModelValidation from DataFlow::Node node, string kind where sinkNode(node, kind) diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/srcs.ext.yml b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/srcs.ext.yml new file mode 100644 index 00000000000..5493650132c --- /dev/null +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/srcs.ext.yml @@ -0,0 +1,11 @@ +extensions: + - addsTo: + pack: codeql/go-all + extensible: sourceModel + data: + - ["github.com/nonexistent/test", "A", False, "Src1", "", "", "ReturnValue", "qltest", "manual"] + - ["github.com/nonexistent/test", "A", False, "Src2", "", "", "ReturnValue", "qltest", "manual"] + - ["github.com/nonexistent/test", "A", True, "Src2", "", "", "ReturnValue", "qltest-w-subtypes", "manual"] + - ["github.com/nonexistent/test", "A", False, "SrcArg", "", "", "Argument[0]", "qltest-arg", "manual"] + - ["github.com/nonexistent/test", "A", False, "Src3", "", "", "ReturnValue[0]", "qltest", "manual"] + - ["github.com/nonexistent/test", "A", True, "Src3", "", "", "ReturnValue[1]", "qltest-w-subtypes", "manual"] \ No newline at end of file diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/srcs.ql b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/srcs.ql index 79514cbdc23..d1cd0fee89d 100644 --- a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/srcs.ql +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/srcs.ql @@ -1,21 +1,6 @@ import go import semmle.go.dataflow.ExternalFlow -import CsvValidation - -class SourceModelTest extends SourceModelCsv { - override predicate row(string row) { - row = - [ - //`namespace; type; subtypes; name; -; ext; output; kind` - "github.com/nonexistent/test;A;false;Src1;;;ReturnValue;qltest", - "github.com/nonexistent/test;A;false;Src2;;;ReturnValue;qltest", - "github.com/nonexistent/test;A;true;Src2;;;ReturnValue;qltest-w-subtypes", - "github.com/nonexistent/test;A;false;SrcArg;;;Argument[0];qltest-arg", - "github.com/nonexistent/test;A;false;Src3;;;ReturnValue[0];qltest", - "github.com/nonexistent/test;A;true;Src3;;;ReturnValue[1];qltest-w-subtypes" - ] - } -} +import ModelValidation from DataFlow::Node node, string kind where sourceNode(node, kind) diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/steps.ext.yml b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/steps.ext.yml new file mode 100644 index 00000000000..f1c5a78ecbf --- /dev/null +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/steps.ext.yml @@ -0,0 +1,14 @@ +extensions: + - addsTo: + pack: codeql/go-all + extensible: summaryModel + data: + - ["github.com/nonexistent/test", "T", False, "StepArgRes", "", "", "Argument[0]", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepArgRes1", "", "", "Argument[0]", "ReturnValue[1]", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepArgArg", "", "", "Argument[0]", "Argument[1]", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepArgQual", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepQualRes", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "T", False, "StepQualArg", "", "", "Argument[-1]", "Argument[0]", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgResNoQual", "", "", "Argument[0]", "ReturnValue", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgResContent", "", "", "Argument[0]", "ReturnValue.ArrayElement", "taint", "manual"] + - ["github.com/nonexistent/test", "", False, "StepArgContentRes", "", "", "Argument[0].ArrayElement", "ReturnValue", "taint", "manual"] diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/steps.ql b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/steps.ql index c6603c5df93..00067971b76 100644 --- a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/steps.ql +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlow/steps.ql @@ -1,26 +1,8 @@ import go import semmle.go.dataflow.ExternalFlow -import CsvValidation +import ModelValidation import semmle.go.dataflow.internal.FlowSummaryImpl as FlowSummaryImpl -class SummaryModelTest extends SummaryModelCsv { - override predicate row(string row) { - row = - [ - //`namespace; type; subtypes; name; -; ext; input; output; kind` - "github.com/nonexistent/test;T;false;StepArgRes;;;Argument[0];ReturnValue;taint", - "github.com/nonexistent/test;T;false;StepArgRes1;;;Argument[0];ReturnValue[1];taint", - "github.com/nonexistent/test;T;false;StepArgArg;;;Argument[0];Argument[1];taint", - "github.com/nonexistent/test;T;false;StepArgQual;;;Argument[0];Argument[-1];taint", - "github.com/nonexistent/test;T;false;StepQualRes;;;Argument[-1];ReturnValue;taint", - "github.com/nonexistent/test;T;false;StepQualArg;;;Argument[-1];Argument[0];taint", - "github.com/nonexistent/test;;false;StepArgResNoQual;;;Argument[0];ReturnValue;taint", - "github.com/nonexistent/test;;false;StepArgResContent;;;Argument[0];ReturnValue.ArrayElement;taint", - "github.com/nonexistent/test;;false;StepArgContentRes;;;Argument[0].ArrayElement;ReturnValue;taint" - ] - } -} - from DataFlow::Node node1, DataFlow::Node node2 where FlowSummaryImpl::Private::Steps::summaryThroughStepTaint(node1, node2, _) select node1, node2 diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/Flows.ext.yml b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/Flows.ext.yml new file mode 100644 index 00000000000..c4c77087049 --- /dev/null +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/Flows.ext.yml @@ -0,0 +1,10 @@ +extensions: + - addsTo: + pack: codeql/go-all + extensible: summaryModel + data: + - ["github.com/nonexistent/test", "", False, "FunctionWithParameter", "", "", "Argument[0]", "ReturnValue", "value", "manual"] + - ["github.com/nonexistent/test", "", False, "FunctionWithSliceParameter", "", "", "Argument[0].ArrayElement", "ReturnValue", "value", "manual"] + - ["github.com/nonexistent/test", "", False, "FunctionWithVarArgsParameter", "", "", "Argument[0].ArrayElement", "ReturnValue", "value", "manual"] + - ["github.com/nonexistent/test", "", False, "FunctionWithSliceOfStructsParameter", "", "", "Argument[0].ArrayElement.Field[github.com/nonexistent/test.A.Field]", "ReturnValue", "value", "manual"] + - ["github.com/nonexistent/test", "", False, "FunctionWithVarArgsOfStructsParameter", "", "", "Argument[0].ArrayElement.Field[github.com/nonexistent/test.A.Field]", "ReturnValue", "value", "manual"] diff --git a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/Flows.ql b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/Flows.ql index 278da456bf2..1be00de1f13 100644 --- a/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/Flows.ql +++ b/go/ql/test/library-tests/semmle/go/dataflow/ExternalFlowVarArgs/Flows.ql @@ -1,22 +1,8 @@ import go import semmle.go.dataflow.ExternalFlow -import CsvValidation +import ModelValidation import TestUtilities.InlineExpectationsTest -class SummaryModelTest extends SummaryModelCsv { - override predicate row(string row) { - row = - [ - //`namespace; type; subtypes; name; signature; ext; input; output; kind` - "github.com/nonexistent/test;;false;FunctionWithParameter;;;Argument[0];ReturnValue;value", - "github.com/nonexistent/test;;false;FunctionWithSliceParameter;;;Argument[0].ArrayElement;ReturnValue;value", - "github.com/nonexistent/test;;false;FunctionWithVarArgsParameter;;;Argument[0].ArrayElement;ReturnValue;value", - "github.com/nonexistent/test;;false;FunctionWithSliceOfStructsParameter;;;Argument[0].ArrayElement.Field[github.com/nonexistent/test.A.Field];ReturnValue;value", - "github.com/nonexistent/test;;false;FunctionWithVarArgsOfStructsParameter;;;Argument[0].ArrayElement.Field[github.com/nonexistent/test.A.Field];ReturnValue;value" - ] - } -} - class DataConfiguration extends DataFlow::Configuration { DataConfiguration() { this = "data-configuration" } diff --git a/go/ql/test/library-tests/semmle/go/dataflow/VarArgsWithFunctionModels/Flows.ql b/go/ql/test/library-tests/semmle/go/dataflow/VarArgsWithFunctionModels/Flows.ql index e80681e243e..176396da6f7 100644 --- a/go/ql/test/library-tests/semmle/go/dataflow/VarArgsWithFunctionModels/Flows.ql +++ b/go/ql/test/library-tests/semmle/go/dataflow/VarArgsWithFunctionModels/Flows.ql @@ -1,6 +1,6 @@ import go import semmle.go.dataflow.ExternalFlow -import CsvValidation +import ModelValidation // import DataFlow::PartialPathGraph import TestUtilities.InlineExpectationsTest diff --git a/go/ql/test/query-tests/Security/CWE-089/StringBreakGood.go b/go/ql/test/query-tests/Security/CWE-089/StringBreakGood.go index 7c4edbfaaa0..4265db16502 100644 --- a/go/ql/test/query-tests/Security/CWE-089/StringBreakGood.go +++ b/go/ql/test/query-tests/Security/CWE-089/StringBreakGood.go @@ -1,9 +1,11 @@ package main import ( + "bytes" "encoding/json" - sq "github.com/Masterminds/squirrel" "strings" + + sq "github.com/Masterminds/squirrel" ) // Good because there is no concatenation with quotes: @@ -37,3 +39,28 @@ func saveGood3(id string, version interface{}) { Values(id, sq.Expr("'"+escaped+"'")). Exec() } + +var globalReplacer = strings.NewReplacer("\"", "", "'", "") + +// Good because quote characters are removed before concatenation: +func saveGood4(id string, version interface{}) { + versionJSON, _ := json.Marshal(version) + escaped := globalReplacer.Replace(string(versionJSON)) + sq.StatementBuilder. + Insert("resources"). + Columns("resource_id", "version_md5"). + Values(id, sq.Expr("'"+escaped+"'")). + Exec() +} + +// Good because quote characters are removed before concatenation: +func saveGood5(id string, version interface{}) { + versionJSON, _ := json.Marshal(version) + buf := new(bytes.Buffer) + globalReplacer.WriteString(buf, string(versionJSON)) + sq.StatementBuilder. + Insert("resources"). + Columns("resource_id", "version_md5"). + Values(id, sq.Expr("'"+buf.String()+"'")). + Exec() +} diff --git a/go/ql/test/query-tests/Security/CWE-117/LogInjection.go b/go/ql/test/query-tests/Security/CWE-117/LogInjection.go index b6dc9724759..4f02cc9aef8 100644 --- a/go/ql/test/query-tests/Security/CWE-117/LogInjection.go +++ b/go/ql/test/query-tests/Security/CWE-117/LogInjection.go @@ -11,6 +11,7 @@ package main //go:generate depstubber -vendor go.uber.org/zap Logger,SugaredLogger NewProduction import ( + "bytes" "fmt" "log" "net/http" @@ -378,8 +379,43 @@ func handlerGood2(req *http.Request) { log.Printf("user %s logged in.\n", escapedUsername) } +// GOOD: The user-provided value is escaped before being written to the log. +func handlerGood3(req *http.Request) { + username := req.URL.Query()["username"][0] + replacer := strings.NewReplacer("\n", "", "\r", "") + log.Printf("user %s logged in.\n", replacer.Replace(username)) + log.Printf("user %s logged in.\n", replacerLocal1(username)) + log.Printf("user %s logged in.\n", replacerLocal2(username)) + log.Printf("user %s logged in.\n", replacerGlobal1(username)) + log.Printf("user %s logged in.\n", replacerGlobal2(username)) +} + +func replacerLocal1(s string) string { + replacer := strings.NewReplacer("\n", "", "\r", "") + return replacer.Replace(s) +} + +func replacerLocal2(s string) string { + replacer := strings.NewReplacer("\n", "", "\r", "") + buf := new(bytes.Buffer) + replacer.WriteString(buf, s) + return buf.String() +} + +var globalReplacer = strings.NewReplacer("\n", "", "\r", "") + +func replacerGlobal1(s string) string { + return globalReplacer.Replace(s) +} + +func replacerGlobal2(s string) string { + buf := new(bytes.Buffer) + globalReplacer.WriteString(buf, s) + return buf.String() +} + // GOOD: User-provided values formatted using a %q directive, which escapes newlines -func handlerGood3(req *http.Request, ctx *goproxy.ProxyCtx) { +func handlerGood4(req *http.Request, ctx *goproxy.ProxyCtx) { username := req.URL.Query()["username"][0] testFlag := req.URL.Query()["testFlag"][0] log.Printf("user %q logged in.\n", username) diff --git a/java/documentation/library-coverage/coverage.csv b/java/documentation/library-coverage/coverage.csv index 0f23bc54767..e834d085511 100644 --- a/java/documentation/library-coverage/coverage.csv +++ b/java/documentation/library-coverage/coverage.csv @@ -38,13 +38,12 @@ jakarta.ws.rs.client,1,,,,,,,,,,,,,,,,,1,,,,,,,,,,,,,,,,,,,,,,, jakarta.ws.rs.container,,9,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,9,, jakarta.ws.rs.core,2,,149,,,,,,,,,,,,,,,,,,,,,,,,,,,,2,,,,,,,,,94,55 java.beans,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,1, -java.io,37,,40,,15,,,,,,,,,,,,,,,,,,,,,,,,,,,22,,,,,,,,40, -java.lang,13,,75,,,,,,,,,,,,8,,,,,,4,,,1,,,,,,,,,,,,,,,,56,19 -java.math,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,1, +java.io,37,,42,,15,,,,,,,,,,,,,,,,,,,,,,,,,,,22,,,,,,,,41,1 +java.lang,13,,76,,,,,,,,,,,,8,,,,,,4,,,1,,,,,,,,,,,,,,,,53,23 java.net,10,3,7,,,,,,,,,,,,,,,10,,,,,,,,,,,,,,,,,,,,,3,7, java.nio,15,,16,,13,,,,,,,,,,,,,,,,,,,,,,,,,,,2,,,,,,,,16, -java.sql,11,,1,,,,,,,,4,,,,,,,,,,,,,,,,,7,,,,,,,,,,,,1, -java.util,44,,461,,,,,,,,,,,,34,,,,,,,5,2,,1,2,,,,,,,,,,,,,,36,425 +java.sql,11,,2,,,,,,,,4,,,,,,,,,,,,,,,,,7,,,,,,,,,,,,1,1 +java.util,44,,465,,,,,,,,,,,,34,,,,,,,5,2,,1,2,,,,,,,,,,,,,,38,427 javax.faces.context,2,7,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,2,,,,7,, javax.jms,,9,57,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,9,57, javax.json,,,123,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,100,23 diff --git a/java/documentation/library-coverage/coverage.rst b/java/documentation/library-coverage/coverage.rst index d4b43aa1b21..c4630ca11d6 100644 --- a/java/documentation/library-coverage/coverage.rst +++ b/java/documentation/library-coverage/coverage.rst @@ -18,10 +18,10 @@ Java framework & library support `Google Guava `_,``com.google.common.*``,,728,39,,6,,,,, JBoss Logging,``org.jboss.logging``,,,324,,,,,,, `JSON-java `_,``org.json``,,236,,,,,,,, - Java Standard Library,``java.*``,3,602,130,28,,,7,,,10 + Java Standard Library,``java.*``,3,609,130,28,,,7,,,10 Java extensions,"``javax.*``, ``jakarta.*``",63,609,32,,,4,,1,1,2 Kotlin Standard Library,``kotlin*``,,1835,12,10,,,,,,2 `Spring `_,``org.springframework.*``,29,477,101,,,,19,14,,29 Others,"``cn.hutool.core.codec``, ``com.esotericsoftware.kryo.io``, ``com.esotericsoftware.kryo5.io``, ``com.fasterxml.jackson.core``, ``com.fasterxml.jackson.databind``, ``com.hubspot.jinjava``, ``com.mitchellbosecke.pebble``, ``com.opensymphony.xwork2.ognl``, ``com.rabbitmq.client``, ``com.unboundid.ldap.sdk``, ``com.zaxxer.hikari``, ``flexjson``, ``freemarker.cache``, ``freemarker.template``, ``groovy.lang``, ``groovy.util``, ``jodd.json``, ``net.sf.saxon.s9api``, ``ognl``, ``okhttp3``, ``org.apache.commons.codec``, ``org.apache.commons.jexl2``, ``org.apache.commons.jexl3``, ``org.apache.commons.logging``, ``org.apache.commons.ognl``, ``org.apache.directory.ldap.client.api``, ``org.apache.ibatis.jdbc``, ``org.apache.log4j``, ``org.apache.shiro.codec``, ``org.apache.shiro.jndi``, ``org.apache.velocity.app``, ``org.apache.velocity.runtime``, ``org.codehaus.groovy.control``, ``org.dom4j``, ``org.hibernate``, ``org.jdbi.v3.core``, ``org.jooq``, ``org.mvel2``, ``org.scijava.log``, ``org.slf4j``, ``org.thymeleaf``, ``org.xml.sax``, ``org.xmlpull.v1``, ``play.mvc``, ``ratpack.core.form``, ``ratpack.core.handling``, ``ratpack.core.http``, ``ratpack.exec``, ``ratpack.form``, ``ratpack.func``, ``ratpack.handling``, ``ratpack.http``, ``ratpack.util``, ``retrofit2``",60,300,269,,,,14,18,,3 - Totals,,217,8449,1563,129,6,10,107,33,1,86 + Totals,,217,8456,1563,129,6,10,107,33,1,86 diff --git a/java/kotlin-extractor/build.gradle b/java/kotlin-extractor/build.gradle index 7859a2c4c08..57229642a92 100644 --- a/java/kotlin-extractor/build.gradle +++ b/java/kotlin-extractor/build.gradle @@ -46,6 +46,9 @@ sourceSets { "utils/versions/v_1_7_20-Beta/createImplicitParameterDeclarationWithWrappedDescriptor.kt", "utils/versions/v_1_7_20-Beta/allOverriddenIncludingSelf.kt", + + "utils/versions/v_1_8_0/ExperimentalCompilerApi.kt", + "utils/versions/v_1_8_0/FirIncompatiblePluginAPI.kt", ] } } diff --git a/java/kotlin-extractor/kotlin_plugin_versions.py b/java/kotlin-extractor/kotlin_plugin_versions.py index 99691b89fd2..8d08c75803e 100755 --- a/java/kotlin-extractor/kotlin_plugin_versions.py +++ b/java/kotlin-extractor/kotlin_plugin_versions.py @@ -22,10 +22,10 @@ def version_string_to_tuple(version): return tuple([int(m.group(i)) for i in range(1, 4)] + [m.group(4)]) # Version number used by CI. It needs to be one of the versions in many_versions. -ci_version = '1.7.20' +ci_version = '1.8.0' # Version numbers in the list need to be in semantically increasing order -many_versions = [ '1.4.32', '1.5.0', '1.5.10', '1.5.20', '1.5.30', '1.6.0', '1.6.20', '1.7.0', '1.7.20' ] +many_versions = [ '1.4.32', '1.5.0', '1.5.10', '1.5.20', '1.5.30', '1.6.0', '1.6.20', '1.7.0', '1.7.20', '1.8.0' ] many_versions_tuples = [version_string_to_tuple(v) for v in many_versions] diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinExtractorCommandLineProcessor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinExtractorCommandLineProcessor.kt index 5c29d6af54e..f110d48231f 100644 --- a/java/kotlin-extractor/src/main/kotlin/KotlinExtractorCommandLineProcessor.kt +++ b/java/kotlin-extractor/src/main/kotlin/KotlinExtractorCommandLineProcessor.kt @@ -3,9 +3,11 @@ package com.github.codeql import org.jetbrains.kotlin.compiler.plugin.AbstractCliOption import org.jetbrains.kotlin.compiler.plugin.CliOption import org.jetbrains.kotlin.compiler.plugin.CommandLineProcessor +import org.jetbrains.kotlin.compiler.plugin.ExperimentalCompilerApi import org.jetbrains.kotlin.config.CompilerConfiguration import org.jetbrains.kotlin.config.CompilerConfigurationKey +@OptIn(ExperimentalCompilerApi::class) class KotlinExtractorCommandLineProcessor : CommandLineProcessor { override val pluginId = "kotlin-extractor" diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinExtractorComponentRegistrar.kt b/java/kotlin-extractor/src/main/kotlin/KotlinExtractorComponentRegistrar.kt index daee156d58c..f2f22390eb3 100644 --- a/java/kotlin-extractor/src/main/kotlin/KotlinExtractorComponentRegistrar.kt +++ b/java/kotlin-extractor/src/main/kotlin/KotlinExtractorComponentRegistrar.kt @@ -1,10 +1,15 @@ +// For ComponentRegistrar +@file:Suppress("DEPRECATION") + package com.github.codeql import org.jetbrains.kotlin.backend.common.extensions.IrGenerationExtension +import org.jetbrains.kotlin.compiler.plugin.ExperimentalCompilerApi import com.intellij.mock.MockProject import org.jetbrains.kotlin.compiler.plugin.ComponentRegistrar import org.jetbrains.kotlin.config.CompilerConfiguration +@OptIn(ExperimentalCompilerApi::class) class KotlinExtractorComponentRegistrar : ComponentRegistrar { override fun registerProjectComponents( project: MockProject, diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt index 5990fb3389d..793d7b15b6f 100644 --- a/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt +++ b/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt @@ -1387,7 +1387,7 @@ open class KotlinFileExtractor( private fun getNullabilityAnnotation(t: IrType, declOrigin: IrDeclarationOrigin, existingAnnotations: List, javaAnnotations: Collection?) = getNullabilityAnnotationName(t, declOrigin, existingAnnotations, javaAnnotations)?.let { - pluginContext.referenceClass(it)?.let { annotationClass -> + getClassByFqName(pluginContext, it)?.let { annotationClass -> annotationClass.owner.declarations.firstIsInstanceOrNull()?.let { annotationConstructor -> IrConstructorCallImpl.fromSymbolOwner( UNDEFINED_OFFSET, UNDEFINED_OFFSET, annotationConstructor.returnType, annotationConstructor.symbol, 0 @@ -1709,6 +1709,10 @@ open class KotlinFileExtractor( when (b.kind) { IrSyntheticBodyKind.ENUM_VALUES -> tw.writeKtSyntheticBody(callable, 1) IrSyntheticBodyKind.ENUM_VALUEOF -> tw.writeKtSyntheticBody(callable, 2) + else -> { + // TODO: Support IrSyntheticBodyKind.ENUM_ENTRIES + logger.errorElement("Unhandled synthetic body kind " + b.kind.javaClass, b) + } } } } @@ -2400,7 +2404,7 @@ open class KotlinFileExtractor( private fun findTopLevelFunctionOrWarn(functionFilter: String, type: String, parameterTypes: Array, warnAgainstElement: IrElement): IrFunction? { - val fn = pluginContext.referenceFunctions(FqName(functionFilter)) + val fn = getFunctionsByFqName(pluginContext, functionFilter) .firstOrNull { fnSymbol -> fnSymbol.owner.parentClassOrNull?.fqNameWhenAvailable?.asString() == type && fnSymbol.owner.valueParameters.map { it.type.classFqName?.asString() }.toTypedArray() contentEquals parameterTypes @@ -2419,7 +2423,7 @@ open class KotlinFileExtractor( private fun findTopLevelPropertyOrWarn(propertyFilter: String, type: String, warnAgainstElement: IrElement): IrProperty? { - val prop = pluginContext.referenceProperties(FqName(propertyFilter)) + val prop = getPropertiesByFqName(pluginContext, propertyFilter) .firstOrNull { it.owner.parentClassOrNull?.fqNameWhenAvailable?.asString() == type } ?.owner diff --git a/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt b/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt index fe55fdba256..92fc961dd0f 100644 --- a/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt +++ b/java/kotlin-extractor/src/main/kotlin/KotlinUsesExtractor.kt @@ -41,7 +41,7 @@ open class KotlinUsesExtractor( val globalExtensionState: KotlinExtractorGlobalState ) { fun referenceExternalClass(name: String) = - pluginContext.referenceClass(FqName(name))?.owner.also { + getClassByFqName(pluginContext, FqName(name))?.owner.also { if (it == null) logger.warn("Unable to resolve external class $name") else @@ -118,7 +118,7 @@ open class KotlinUsesExtractor( } fun getJavaEquivalentClass(c: IrClass) = - getJavaEquivalentClassId(c)?.let { pluginContext.referenceClass(it.asSingleFqName()) }?.owner + getJavaEquivalentClassId(c)?.let { getClassByFqName(pluginContext, it.asSingleFqName()) }?.owner /** * Gets a KotlinFileExtractor based on this one, except it attributes locations to the file that declares the given class. @@ -328,7 +328,7 @@ open class KotlinUsesExtractor( return@getOrPut null } - val result = pluginContext.referenceClass(qualifiedName)?.owner + val result = getClassByFqName(pluginContext, qualifiedName)?.owner if (result != null) { logger.info("Replaced synthetic class ${c.name} with its real equivalent") return@getOrPut result @@ -337,7 +337,7 @@ open class KotlinUsesExtractor( // The above doesn't work for (some) generated nested classes, such as R$id, which should be R.id val fqn = qualifiedName.asString() if (fqn.indexOf('$') >= 0) { - val nested = pluginContext.referenceClass(FqName(fqn.replace('$', '.')))?.owner + val nested = getClassByFqName(pluginContext, fqn.replace('$', '.'))?.owner if (nested != null) { logger.info("Replaced synthetic nested class ${c.name} with its real equivalent") return@getOrPut nested @@ -454,7 +454,7 @@ open class KotlinUsesExtractor( } fun tryGetPair(arity: Int): Pair?>? { - val replaced = pluginContext.referenceClass(fqName)?.owner ?: return null + val replaced = getClassByFqName(pluginContext, fqName)?.owner ?: return null return Pair(replaced, List(arity) { makeTypeProjection(pluginContext.irBuiltIns.anyNType, Variance.INVARIANT) }) } diff --git a/java/kotlin-extractor/src/main/kotlin/PrimitiveTypeInfo.kt b/java/kotlin-extractor/src/main/kotlin/PrimitiveTypeInfo.kt index 8d844a65ec8..a14b0c138db 100644 --- a/java/kotlin-extractor/src/main/kotlin/PrimitiveTypeInfo.kt +++ b/java/kotlin-extractor/src/main/kotlin/PrimitiveTypeInfo.kt @@ -7,6 +7,7 @@ import org.jetbrains.kotlin.ir.declarations.IrPackageFragment import org.jetbrains.kotlin.ir.types.IrSimpleType import org.jetbrains.kotlin.ir.types.classOrNull import org.jetbrains.kotlin.name.FqName +import com.github.codeql.utils.* class PrimitiveTypeMapping(val logger: Logger, val pluginContext: IrPluginContext) { fun getPrimitiveInfo(s: IrSimpleType) = @@ -25,7 +26,7 @@ class PrimitiveTypeMapping(val logger: Logger, val pluginContext: IrPluginContex ) private fun findClass(fqName: String, fallback: IrClass): IrClass { - val symbol = pluginContext.referenceClass(FqName(fqName)) + val symbol = getClassByFqName(pluginContext, fqName) if(symbol == null) { logger.warn("Can't find $fqName") // Do the best we can diff --git a/java/kotlin-extractor/src/main/kotlin/utils/GetByFqName.kt b/java/kotlin-extractor/src/main/kotlin/utils/GetByFqName.kt new file mode 100644 index 00000000000..57815fc4409 --- /dev/null +++ b/java/kotlin-extractor/src/main/kotlin/utils/GetByFqName.kt @@ -0,0 +1,33 @@ +package com.github.codeql.utils + +import org.jetbrains.kotlin.backend.common.extensions.FirIncompatiblePluginAPI +import org.jetbrains.kotlin.backend.common.extensions.IrPluginContext +import org.jetbrains.kotlin.ir.symbols.* +import org.jetbrains.kotlin.name.FqName + +fun getClassByFqName(pluginContext: IrPluginContext, fqName: String): IrClassSymbol? { + return getClassByFqName(pluginContext, FqName(fqName)) +} + +fun getClassByFqName(pluginContext: IrPluginContext, fqName: FqName): IrClassSymbol? { + @OptIn(FirIncompatiblePluginAPI::class) + return pluginContext.referenceClass(fqName) +} + +fun getFunctionsByFqName(pluginContext: IrPluginContext, fqName: String): Collection { + return getFunctionsByFqName(pluginContext, FqName(fqName)) +} + +private fun getFunctionsByFqName(pluginContext: IrPluginContext, fqName: FqName): Collection { + @OptIn(FirIncompatiblePluginAPI::class) + return pluginContext.referenceFunctions(fqName) +} + +fun getPropertiesByFqName(pluginContext: IrPluginContext, fqName: String): Collection { + return getPropertiesByFqName(pluginContext, FqName(fqName)) +} + +private fun getPropertiesByFqName(pluginContext: IrPluginContext, fqName: FqName): Collection { + @OptIn(FirIncompatiblePluginAPI::class) + return pluginContext.referenceProperties(fqName) +} diff --git a/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_4_32/ExperimentalCompilerApi.kt b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_4_32/ExperimentalCompilerApi.kt new file mode 100644 index 00000000000..9b40a26bc51 --- /dev/null +++ b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_4_32/ExperimentalCompilerApi.kt @@ -0,0 +1,4 @@ +package org.jetbrains.kotlin.compiler.plugin + +@RequiresOptIn("This API is experimental. There are no stability guarantees for it") +annotation class ExperimentalCompilerApi diff --git a/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_4_32/FirIncompatiblePluginAPI.kt b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_4_32/FirIncompatiblePluginAPI.kt new file mode 100644 index 00000000000..45d573da9c7 --- /dev/null +++ b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_4_32/FirIncompatiblePluginAPI.kt @@ -0,0 +1,5 @@ +package org.jetbrains.kotlin.backend.common.extensions + +@RequiresOptIn("This API is not available after FIR") +annotation class FirIncompatiblePluginAPI + diff --git a/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_8_0/ExperimentalCompilerApi.kt b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_8_0/ExperimentalCompilerApi.kt new file mode 100644 index 00000000000..48829cc30c5 --- /dev/null +++ b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_8_0/ExperimentalCompilerApi.kt @@ -0,0 +1,4 @@ +package com.github.codeql + +// The compiler provides the annotation class, so we don't need to do +// anything diff --git a/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_8_0/FirIncompatiblePluginAPI.kt b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_8_0/FirIncompatiblePluginAPI.kt new file mode 100644 index 00000000000..48829cc30c5 --- /dev/null +++ b/java/kotlin-extractor/src/main/kotlin/utils/versions/v_1_8_0/FirIncompatiblePluginAPI.kt @@ -0,0 +1,4 @@ +package com.github.codeql + +// The compiler provides the annotation class, so we don't need to do +// anything diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/build.gradle.kts new file mode 100644 index 00000000000..7c0bc493500 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/build.gradle.kts @@ -0,0 +1,13 @@ +plugins { + + /** + * Use `apply false` in the top-level build.gradle file to add a Gradle + * plugin as a build dependency but not apply it to the current (root) + * project. Don't use `apply false` in sub-projects. For more information, + * see Applying external plugins with same version to subprojects. + */ + + id("com.android.application") version "7.3.1" apply false + id("com.android.library") version "7.3.1" apply false + id("org.jetbrains.kotlin.android") version "1.7.20" apply false +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/build.gradle.kts new file mode 100644 index 00000000000..3e89b8a6df9 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/build.gradle.kts @@ -0,0 +1,65 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id("com.android.application") +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace = "com.github.androidsample" + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk = 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId = "com.github.androidsample" + + // Defines the minimum API level required to run the app. + minSdk = 21 + + // Specifies the API level used to test the app. + targetSdk = 33 + + // Defines the version number of your app. + versionCode = 1 + + // Defines a user-friendly version name for your app. + versionName = "1.0" + } + +} + +androidComponents { + beforeVariants { variantBuilder -> + if (variantBuilder.buildType == "debug") { + variantBuilder.enable = false + } + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/settings.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/settings.gradle.kts new file mode 100644 index 00000000000..1e8eb927d56 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/settings.gradle.kts @@ -0,0 +1,40 @@ +pluginManagement { + + /** + * The pluginManagement {repositories {...}} block configures the + * repositories Gradle uses to search or download the Gradle plugins and + * their transitive dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use + * local repositories or define your own remote repositories. The code below + * defines the Gradle Plugin Portal, Google's Maven repository, + * and the Maven Central Repository as the repositories Gradle should use to look for its + * dependencies. + */ + + repositories { + gradlePluginPortal() + google() + mavenCentral() + } +} +dependencyResolutionManagement { + + /** + * The dependencyResolutionManagement {repositories {...}} + * block is where you configure the repositories and dependencies used by + * all modules in your project, such as libraries that you are using to + * create your application. However, you should configure module-specific + * dependencies in each module-level build.gradle file. For new projects, + * Android Studio includes Google's Maven repository and the Maven Central + * Repository by default, but it does not configure any dependencies (unless + * you select a template that requires some). + */ + + repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) + repositories { + google() + mavenCentral() + } +} +rootProject.name = "Android Sample" +include(":project") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.expected new file mode 100644 index 00000000000..3b3e672ea74 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.expected @@ -0,0 +1,20 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/module.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.py b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script-no-wrapper/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/.gitattributes b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/.gitattributes new file mode 100644 index 00000000000..00a51aff5e5 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/.gitattributes @@ -0,0 +1,6 @@ +# +# https://help.github.com/articles/dealing-with-line-endings/ +# +# These are explicitly windows files and should use crlf +*.bat text eol=crlf + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/build.gradle.kts new file mode 100644 index 00000000000..7c0bc493500 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/build.gradle.kts @@ -0,0 +1,13 @@ +plugins { + + /** + * Use `apply false` in the top-level build.gradle file to add a Gradle + * plugin as a build dependency but not apply it to the current (root) + * project. Don't use `apply false` in sub-projects. For more information, + * see Applying external plugins with same version to subprojects. + */ + + id("com.android.application") version "7.3.1" apply false + id("com.android.library") version "7.3.1" apply false + id("org.jetbrains.kotlin.android") version "1.7.20" apply false +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradle/wrapper/gradle-wrapper.jar b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 00000000000..249e5832f09 Binary files /dev/null and b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradle/wrapper/gradle-wrapper.jar differ diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradle/wrapper/gradle-wrapper.properties b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 00000000000..41dfb87909a --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,5 @@ +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-7.4-bin.zip +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradlew b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradlew new file mode 100755 index 00000000000..a69d9cb6c20 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradlew @@ -0,0 +1,240 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/master/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit + +APP_NAME="Gradle" +APP_BASE_NAME=${0##*/} + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + +# Collect all arguments for the java command; +# * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of +# shell script including quotes and variable substitutions, so put them in +# double quotes to make sure that they get re-expanded; and +# * put everything else in single quotes, so that it's not re-expanded. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradlew.bat b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradlew.bat new file mode 100644 index 00000000000..f127cfd49d4 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/gradlew.bat @@ -0,0 +1,91 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/build.gradle.kts new file mode 100644 index 00000000000..3e89b8a6df9 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/build.gradle.kts @@ -0,0 +1,65 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id("com.android.application") +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace = "com.github.androidsample" + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk = 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId = "com.github.androidsample" + + // Defines the minimum API level required to run the app. + minSdk = 21 + + // Specifies the API level used to test the app. + targetSdk = 33 + + // Defines the version number of your app. + versionCode = 1 + + // Defines a user-friendly version name for your app. + versionName = "1.0" + } + +} + +androidComponents { + beforeVariants { variantBuilder -> + if (variantBuilder.buildType == "debug") { + variantBuilder.enable = false + } + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/settings.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/settings.gradle.kts new file mode 100644 index 00000000000..1e8eb927d56 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/settings.gradle.kts @@ -0,0 +1,40 @@ +pluginManagement { + + /** + * The pluginManagement {repositories {...}} block configures the + * repositories Gradle uses to search or download the Gradle plugins and + * their transitive dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use + * local repositories or define your own remote repositories. The code below + * defines the Gradle Plugin Portal, Google's Maven repository, + * and the Maven Central Repository as the repositories Gradle should use to look for its + * dependencies. + */ + + repositories { + gradlePluginPortal() + google() + mavenCentral() + } +} +dependencyResolutionManagement { + + /** + * The dependencyResolutionManagement {repositories {...}} + * block is where you configure the repositories and dependencies used by + * all modules in your project, such as libraries that you are using to + * create your application. However, you should configure module-specific + * dependencies in each module-level build.gradle file. For new projects, + * Android Studio includes Google's Maven repository and the Maven Central + * Repository by default, but it does not configure any dependencies (unless + * you select a template that requires some). + */ + + repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) + repositories { + google() + mavenCentral() + } +} +rootProject.name = "Android Sample" +include(":project") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.expected new file mode 100644 index 00000000000..3b3e672ea74 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.expected @@ -0,0 +1,20 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/module.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.py b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-kotlin-build-script/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/build.gradle new file mode 100644 index 00000000000..b2708d1ac3d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/build.gradle @@ -0,0 +1,13 @@ +plugins { + + /** + * Use `apply false` in the top-level build.gradle file to add a Gradle + * plugin as a build dependency but not apply it to the current (root) + * project. Don't use `apply false` in sub-projects. For more information, + * see Applying external plugins with same version to subprojects. + */ + + id 'com.android.application' version '7.3.1' apply false + id 'com.android.library' version '7.3.1' apply false + id 'org.jetbrains.kotlin.android' version '1.7.20' apply false +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/build.gradle new file mode 100644 index 00000000000..7751b92ae54 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/build.gradle @@ -0,0 +1,58 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id 'com.android.application' +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace 'com.github.androidsample' + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId 'com.github.androidsample' + + // Defines the minimum API level required to run the app. + minSdk 21 + + // Specifies the API level used to test the app. + targetSdk 33 + + // Defines the version number of your app. + versionCode 1 + + // Defines a user-friendly version name for your app. + versionName "1.0" + } + + variantFilter { variant -> if (variant.buildType.name == "debug") { setIgnore(true) } } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/settings.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/settings.gradle new file mode 100644 index 00000000000..1fa19406e1a --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/settings.gradle @@ -0,0 +1,40 @@ +pluginManagement { + + /** + * The pluginManagement {repositories {...}} block configures the + * repositories Gradle uses to search or download the Gradle plugins and + * their transitive dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use + * local repositories or define your own remote repositories. The code below + * defines the Gradle Plugin Portal, Google's Maven repository, + * and the Maven Central Repository as the repositories Gradle should use to look for its + * dependencies. + */ + + repositories { + gradlePluginPortal() + google() + mavenCentral() + } +} +dependencyResolutionManagement { + + /** + * The dependencyResolutionManagement {repositories {...}} + * block is where you configure the repositories and dependencies used by + * all modules in your project, such as libraries that you are using to + * create your application. However, you should configure module-specific + * dependencies in each module-level build.gradle file. For new projects, + * Android Studio includes Google's Maven repository and the Maven Central + * Repository by default, but it does not configure any dependencies (unless + * you select a template that requires some). + */ + + repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) + repositories { + google() + mavenCentral() + } +} +rootProject.name = "Android Sample" +include ':project' diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.expected new file mode 100644 index 00000000000..3b3e672ea74 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.expected @@ -0,0 +1,20 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/module.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.py b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-no-wrapper/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/README b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/README new file mode 100644 index 00000000000..e8cdda45677 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/README @@ -0,0 +1 @@ +The difference between these old-style Android tests and those without the old-style suffix is that the old-style tests use com.android.tools.build in their top-level build script as shown in the example at https://developer.android.com/studio/build/#top-level before February 2022, whereas the new-style tests only refer to com.android.application and com.android.library as shown in the updated examples published in February 2022. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/build.gradle.kts new file mode 100644 index 00000000000..2514b708295 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/build.gradle.kts @@ -0,0 +1,44 @@ +buildscript { + + /** + * The repositories block configures the repositories Gradle uses to + * search or download the dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use local + * repositories or define your own remote repositories. The code below defines + * JCenter as the repository Gradle should use to look for its dependencies. + * + * New projects created using Android Studio 3.0 and higher also include + * Google's Maven repository. + */ + + repositories { + google() + jcenter() + } + + /** + * The dependencies block configures the dependencies Gradle needs to use + * to build your project. The following line adds Android plugin for Gradle + * version 7.0.0 as a classpath dependency. + */ + + dependencies { + classpath("com.android.tools.build:gradle:7.0.0") + } +} + +/** + * The allprojects block is where you configure the repositories and + * dependencies used by all modules in your project, such as third-party plugins + * or libraries. However, you should configure module-specific dependencies in + * each module-level build.gradle file. For new projects, Android Studio + * includes JCenter and Google's Maven repository by default, but it does not + * configure any dependencies (unless you select a template that requires some). + */ + +allprojects { + repositories { + google() + jcenter() + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/build.gradle.kts new file mode 100644 index 00000000000..95b77607cb3 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/build.gradle.kts @@ -0,0 +1,65 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id("com.android.application") +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace = "com.github.androidsample" + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk = 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId = "com.github.androidsample" + + // Defines the minimum API level required to run the app. + minSdk = 21 + + // Specifies the API level used to test the app. + targetSdk = 33 + + // Defines the version number of your app. + versionCode = 1 + + // Defines a user-friendly version name for your app. + versionName = "1.0" + } + +} + +androidComponents { + beforeVariants { variantBuilder -> + if (variantBuilder.buildType == "debug") { + variantBuilder.enabled = false + } + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/settings.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/settings.gradle.kts new file mode 100644 index 00000000000..be05fdbb1b9 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/settings.gradle.kts @@ -0,0 +1,2 @@ +rootProject.name = "Android Sample" +include(":project") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.expected new file mode 100644 index 00000000000..5ea6cd8c5ca --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.expected @@ -0,0 +1,22 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/module.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseResources/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.py b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script-no-wrapper/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/.gitattributes b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/.gitattributes new file mode 100644 index 00000000000..00a51aff5e5 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/.gitattributes @@ -0,0 +1,6 @@ +# +# https://help.github.com/articles/dealing-with-line-endings/ +# +# These are explicitly windows files and should use crlf +*.bat text eol=crlf + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/README b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/README new file mode 100644 index 00000000000..e8cdda45677 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/README @@ -0,0 +1 @@ +The difference between these old-style Android tests and those without the old-style suffix is that the old-style tests use com.android.tools.build in their top-level build script as shown in the example at https://developer.android.com/studio/build/#top-level before February 2022, whereas the new-style tests only refer to com.android.application and com.android.library as shown in the updated examples published in February 2022. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/build.gradle.kts new file mode 100644 index 00000000000..2514b708295 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/build.gradle.kts @@ -0,0 +1,44 @@ +buildscript { + + /** + * The repositories block configures the repositories Gradle uses to + * search or download the dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use local + * repositories or define your own remote repositories. The code below defines + * JCenter as the repository Gradle should use to look for its dependencies. + * + * New projects created using Android Studio 3.0 and higher also include + * Google's Maven repository. + */ + + repositories { + google() + jcenter() + } + + /** + * The dependencies block configures the dependencies Gradle needs to use + * to build your project. The following line adds Android plugin for Gradle + * version 7.0.0 as a classpath dependency. + */ + + dependencies { + classpath("com.android.tools.build:gradle:7.0.0") + } +} + +/** + * The allprojects block is where you configure the repositories and + * dependencies used by all modules in your project, such as third-party plugins + * or libraries. However, you should configure module-specific dependencies in + * each module-level build.gradle file. For new projects, Android Studio + * includes JCenter and Google's Maven repository by default, but it does not + * configure any dependencies (unless you select a template that requires some). + */ + +allprojects { + repositories { + google() + jcenter() + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradle/wrapper/gradle-wrapper.jar b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 00000000000..249e5832f09 Binary files /dev/null and b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradle/wrapper/gradle-wrapper.jar differ diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradle/wrapper/gradle-wrapper.properties b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 00000000000..41dfb87909a --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,5 @@ +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-7.4-bin.zip +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradlew b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradlew new file mode 100755 index 00000000000..a69d9cb6c20 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradlew @@ -0,0 +1,240 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/master/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit + +APP_NAME="Gradle" +APP_BASE_NAME=${0##*/} + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + +# Collect all arguments for the java command; +# * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of +# shell script including quotes and variable substitutions, so put them in +# double quotes to make sure that they get re-expanded; and +# * put everything else in single quotes, so that it's not re-expanded. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradlew.bat b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradlew.bat new file mode 100644 index 00000000000..f127cfd49d4 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/gradlew.bat @@ -0,0 +1,91 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/build.gradle.kts new file mode 100644 index 00000000000..95b77607cb3 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/build.gradle.kts @@ -0,0 +1,65 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id("com.android.application") +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace = "com.github.androidsample" + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk = 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId = "com.github.androidsample" + + // Defines the minimum API level required to run the app. + minSdk = 21 + + // Specifies the API level used to test the app. + targetSdk = 33 + + // Defines the version number of your app. + versionCode = 1 + + // Defines a user-friendly version name for your app. + versionName = "1.0" + } + +} + +androidComponents { + beforeVariants { variantBuilder -> + if (variantBuilder.buildType == "debug") { + variantBuilder.enabled = false + } + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/settings.gradle.kts b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/settings.gradle.kts new file mode 100644 index 00000000000..be05fdbb1b9 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/settings.gradle.kts @@ -0,0 +1,2 @@ +rootProject.name = "Android Sample" +include(":project") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.expected new file mode 100644 index 00000000000..5ea6cd8c5ca --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.expected @@ -0,0 +1,22 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/module.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseResources/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.py b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-kotlin-build-script/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/README b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/README new file mode 100644 index 00000000000..e8cdda45677 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/README @@ -0,0 +1 @@ +The difference between these old-style Android tests and those without the old-style suffix is that the old-style tests use com.android.tools.build in their top-level build script as shown in the example at https://developer.android.com/studio/build/#top-level before February 2022, whereas the new-style tests only refer to com.android.application and com.android.library as shown in the updated examples published in February 2022. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/build.gradle new file mode 100644 index 00000000000..caff3a2589f --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/build.gradle @@ -0,0 +1,44 @@ +buildscript { + + /** + * The repositories block configures the repositories Gradle uses to + * search or download the dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use local + * repositories or define your own remote repositories. The code below defines + * JCenter as the repository Gradle should use to look for its dependencies. + * + * New projects created using Android Studio 3.0 and higher also include + * Google's Maven repository. + */ + + repositories { + google() + jcenter() + } + + /** + * The dependencies block configures the dependencies Gradle needs to use + * to build your project. The following line adds Android plugin for Gradle + * version 7.0.0 as a classpath dependency. + */ + + dependencies { + classpath 'com.android.tools.build:gradle:7.0.0' + } +} + +/** + * The allprojects block is where you configure the repositories and + * dependencies used by all modules in your project, such as third-party plugins + * or libraries. However, you should configure module-specific dependencies in + * each module-level build.gradle file. For new projects, Android Studio + * includes JCenter and Google's Maven repository by default, but it does not + * configure any dependencies (unless you select a template that requires some). + */ + +allprojects { + repositories { + google() + jcenter() + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/build.gradle new file mode 100644 index 00000000000..7751b92ae54 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/build.gradle @@ -0,0 +1,58 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id 'com.android.application' +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace 'com.github.androidsample' + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId 'com.github.androidsample' + + // Defines the minimum API level required to run the app. + minSdk 21 + + // Specifies the API level used to test the app. + targetSdk 33 + + // Defines the version number of your app. + versionCode 1 + + // Defines a user-friendly version name for your app. + versionName "1.0" + } + + variantFilter { variant -> if (variant.buildType.name == "debug") { setIgnore(true) } } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/settings.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/settings.gradle new file mode 100644 index 00000000000..d04e162bfef --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/settings.gradle @@ -0,0 +1,2 @@ +rootProject.name = "Android Sample" +include ':project' diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.expected new file mode 100644 index 00000000000..5ea6cd8c5ca --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.expected @@ -0,0 +1,22 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/module.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseResources/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.py b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style-no-wrapper/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/.gitattributes b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/.gitattributes new file mode 100644 index 00000000000..00a51aff5e5 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/.gitattributes @@ -0,0 +1,6 @@ +# +# https://help.github.com/articles/dealing-with-line-endings/ +# +# These are explicitly windows files and should use crlf +*.bat text eol=crlf + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/README b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/README new file mode 100644 index 00000000000..e8cdda45677 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/README @@ -0,0 +1 @@ +The difference between these old-style Android tests and those without the old-style suffix is that the old-style tests use com.android.tools.build in their top-level build script as shown in the example at https://developer.android.com/studio/build/#top-level before February 2022, whereas the new-style tests only refer to com.android.application and com.android.library as shown in the updated examples published in February 2022. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/build.gradle new file mode 100644 index 00000000000..caff3a2589f --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/build.gradle @@ -0,0 +1,44 @@ +buildscript { + + /** + * The repositories block configures the repositories Gradle uses to + * search or download the dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use local + * repositories or define your own remote repositories. The code below defines + * JCenter as the repository Gradle should use to look for its dependencies. + * + * New projects created using Android Studio 3.0 and higher also include + * Google's Maven repository. + */ + + repositories { + google() + jcenter() + } + + /** + * The dependencies block configures the dependencies Gradle needs to use + * to build your project. The following line adds Android plugin for Gradle + * version 7.0.0 as a classpath dependency. + */ + + dependencies { + classpath 'com.android.tools.build:gradle:7.0.0' + } +} + +/** + * The allprojects block is where you configure the repositories and + * dependencies used by all modules in your project, such as third-party plugins + * or libraries. However, you should configure module-specific dependencies in + * each module-level build.gradle file. For new projects, Android Studio + * includes JCenter and Google's Maven repository by default, but it does not + * configure any dependencies (unless you select a template that requires some). + */ + +allprojects { + repositories { + google() + jcenter() + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradle/wrapper/gradle-wrapper.jar b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 00000000000..249e5832f09 Binary files /dev/null and b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradle/wrapper/gradle-wrapper.jar differ diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradle/wrapper/gradle-wrapper.properties b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 00000000000..41dfb87909a --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,5 @@ +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-7.4-bin.zip +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradlew b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradlew new file mode 100755 index 00000000000..a69d9cb6c20 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradlew @@ -0,0 +1,240 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/master/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit + +APP_NAME="Gradle" +APP_BASE_NAME=${0##*/} + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + +# Collect all arguments for the java command; +# * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of +# shell script including quotes and variable substitutions, so put them in +# double quotes to make sure that they get re-expanded; and +# * put everything else in single quotes, so that it's not re-expanded. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradlew.bat b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradlew.bat new file mode 100644 index 00000000000..f127cfd49d4 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/gradlew.bat @@ -0,0 +1,91 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/build.gradle new file mode 100644 index 00000000000..7751b92ae54 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/build.gradle @@ -0,0 +1,58 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id 'com.android.application' +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace 'com.github.androidsample' + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId 'com.github.androidsample' + + // Defines the minimum API level required to run the app. + minSdk 21 + + // Specifies the API level used to test the app. + targetSdk 33 + + // Defines the version number of your app. + versionCode 1 + + // Defines a user-friendly version name for your app. + versionName "1.0" + } + + variantFilter { variant -> if (variant.buildType.name == "debug") { setIgnore(true) } } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/settings.gradle b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/settings.gradle new file mode 100644 index 00000000000..d04e162bfef --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/settings.gradle @@ -0,0 +1,2 @@ +rootProject.name = "Android Sample" +include ':project' diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.expected new file mode 100644 index 00000000000..5ea6cd8c5ca --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.expected @@ -0,0 +1,22 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-testArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/module.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseResources/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.py b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample-old-style/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/.gitattributes b/java/ql/integration-tests/all-platforms/java/android-sample/.gitattributes new file mode 100644 index 00000000000..00a51aff5e5 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/.gitattributes @@ -0,0 +1,6 @@ +# +# https://help.github.com/articles/dealing-with-line-endings/ +# +# These are explicitly windows files and should use crlf +*.bat text eol=crlf + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample/build.gradle new file mode 100644 index 00000000000..b2708d1ac3d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/build.gradle @@ -0,0 +1,13 @@ +plugins { + + /** + * Use `apply false` in the top-level build.gradle file to add a Gradle + * plugin as a build dependency but not apply it to the current (root) + * project. Don't use `apply false` in sub-projects. For more information, + * see Applying external plugins with same version to subprojects. + */ + + id 'com.android.application' version '7.3.1' apply false + id 'com.android.library' version '7.3.1' apply false + id 'org.jetbrains.kotlin.android' version '1.7.20' apply false +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/android-sample/force_sequential_test_execution new file mode 100644 index 00000000000..4947fd6fe51 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/force_sequential_test_execution @@ -0,0 +1,4 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. +# Additionally, Android SDK on-demand downloading can fail when multiple tests try to download the same SDK in parallel. diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/gradle/wrapper/gradle-wrapper.jar b/java/ql/integration-tests/all-platforms/java/android-sample/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 00000000000..249e5832f09 Binary files /dev/null and b/java/ql/integration-tests/all-platforms/java/android-sample/gradle/wrapper/gradle-wrapper.jar differ diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/gradle/wrapper/gradle-wrapper.properties b/java/ql/integration-tests/all-platforms/java/android-sample/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 00000000000..41dfb87909a --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,5 @@ +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-7.4-bin.zip +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/gradlew b/java/ql/integration-tests/all-platforms/java/android-sample/gradlew new file mode 100755 index 00000000000..a69d9cb6c20 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/gradlew @@ -0,0 +1,240 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/master/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit + +APP_NAME="Gradle" +APP_BASE_NAME=${0##*/} + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + +# Collect all arguments for the java command; +# * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of +# shell script including quotes and variable substitutions, so put them in +# double quotes to make sure that they get re-expanded; and +# * put everything else in single quotes, so that it's not re-expanded. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/gradlew.bat b/java/ql/integration-tests/all-platforms/java/android-sample/gradlew.bat new file mode 100644 index 00000000000..f127cfd49d4 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/gradlew.bat @@ -0,0 +1,91 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/project/build.gradle b/java/ql/integration-tests/all-platforms/java/android-sample/project/build.gradle new file mode 100644 index 00000000000..7751b92ae54 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/project/build.gradle @@ -0,0 +1,58 @@ +/** + * The first line in the build configuration applies the Android Gradle plugin + * to this build and makes the android block available to specify + * Android-specific build options. + */ + +plugins { + id 'com.android.application' +} + +/** + * The android block is where you configure all your Android-specific + * build options. + */ + +android { + + /** + * The app's namespace. Used primarily to access app resources. + */ + + namespace 'com.github.androidsample' + + /** + * compileSdk specifies the Android API level Gradle should use to + * compile your app. This means your app can use the API features included in + * this API level and lower. + */ + + compileSdk 33 + + /** + * The defaultConfig block encapsulates default settings and entries for all + * build variants and can override some attributes in main/AndroidManifest.xml + * dynamically from the build system. You can configure product flavors to override + * these values for different versions of your app. + */ + + defaultConfig { + + // Uniquely identifies the package for publishing. + applicationId 'com.github.androidsample' + + // Defines the minimum API level required to run the app. + minSdk 21 + + // Specifies the API level used to test the app. + targetSdk 33 + + // Defines the version number of your app. + versionCode 1 + + // Defines a user-friendly version name for your app. + versionName "1.0" + } + + variantFilter { variant -> if (variant.buildType.name == "debug") { setIgnore(true) } } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/project/src/main/AndroidManifest.xml b/java/ql/integration-tests/all-platforms/java/android-sample/project/src/main/AndroidManifest.xml new file mode 100644 index 00000000000..1352b0d90fa --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/project/src/main/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/project/src/main/java/com/github/androidsample/Main.java b/java/ql/integration-tests/all-platforms/java/android-sample/project/src/main/java/com/github/androidsample/Main.java new file mode 100644 index 00000000000..000b12d036d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/project/src/main/java/com/github/androidsample/Main.java @@ -0,0 +1,11 @@ +package com.github.androidsample; + +import android.app.Activity; +import android.os.Bundle; + +public class Main extends Activity +{ + @Override + public void onCreate(Bundle savedInstanceState) { + } +} diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/settings.gradle b/java/ql/integration-tests/all-platforms/java/android-sample/settings.gradle new file mode 100644 index 00000000000..1fa19406e1a --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/settings.gradle @@ -0,0 +1,40 @@ +pluginManagement { + + /** + * The pluginManagement {repositories {...}} block configures the + * repositories Gradle uses to search or download the Gradle plugins and + * their transitive dependencies. Gradle pre-configures support for remote + * repositories such as JCenter, Maven Central, and Ivy. You can also use + * local repositories or define your own remote repositories. The code below + * defines the Gradle Plugin Portal, Google's Maven repository, + * and the Maven Central Repository as the repositories Gradle should use to look for its + * dependencies. + */ + + repositories { + gradlePluginPortal() + google() + mavenCentral() + } +} +dependencyResolutionManagement { + + /** + * The dependencyResolutionManagement {repositories {...}} + * block is where you configure the repositories and dependencies used by + * all modules in your project, such as libraries that you are using to + * create your application. However, you should configure module-specific + * dependencies in each module-level build.gradle file. For new projects, + * Android Studio includes Google's Maven repository and the Maven Central + * Repository by default, but it does not configure any dependencies (unless + * you select a template that requires some). + */ + + repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) + repositories { + google() + mavenCentral() + } +} +rootProject.name = "Android Sample" +include ':project' diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/test.expected b/java/ql/integration-tests/all-platforms/java/android-sample/test.expected new file mode 100644 index 00000000000..3b3e672ea74 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/test.expected @@ -0,0 +1,20 @@ +xmlFiles +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/module.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalAnalyzeRelease/release.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/module.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/module.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-dependencies.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release-mainArtifact-libraries.xml | +| project/build/intermediates/incremental/lintVitalReportRelease/release.xml:0:0:0:0 | project/build/intermediates/incremental/lintVitalReportRelease/release.xml | +| project/build/intermediates/incremental/mergeReleaseAssets/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseAssets/merger.xml | +| project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseJniLibFolders/merger.xml | +| project/build/intermediates/incremental/mergeReleaseShaders/merger.xml:0:0:0:0 | project/build/intermediates/incremental/mergeReleaseShaders/merger.xml | +| project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml:0:0:0:0 | project/build/intermediates/incremental/release/mergeReleaseResources/merger.xml | +| project/build/intermediates/merged_manifest/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifest/release/AndroidManifest.xml | +| project/build/intermediates/merged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/merged_manifests/release/AndroidManifest.xml | +| project/build/intermediates/packaged_manifests/release/AndroidManifest.xml:0:0:0:0 | project/build/intermediates/packaged_manifests/release/AndroidManifest.xml | +| project/src/main/AndroidManifest.xml:0:0:0:0 | project/src/main/AndroidManifest.xml | +#select +| project/build/generated/source/buildConfig/release/com/github/androidsample/BuildConfig.java:0:0:0:0 | BuildConfig | +| project/src/main/java/com/github/androidsample/Main.java:0:0:0:0 | Main | diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/test.py b/java/ql/integration-tests/all-platforms/java/android-sample/test.py new file mode 100644 index 00000000000..c7ab7e66a27 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/test.py @@ -0,0 +1,10 @@ +import sys + +from create_database_utils import * + +if "JAVA_HOME_11_X64" in os.environ: + os.environ["JAVA_HOME"] = os.environ["JAVA_HOME_11_X64"] + sep = ";" if platform.system() == "Windows" else ":" + os.environ["PATH"] = "".join([os.path.join(os.environ["JAVA_HOME"], "bin"), sep, os.environ["PATH"]]) + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/android-sample/test.ql b/java/ql/integration-tests/all-platforms/java/android-sample/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/android-sample/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/.gitattributes b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/.gitattributes new file mode 100644 index 00000000000..097f9f98d9e --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/.gitattributes @@ -0,0 +1,9 @@ +# +# https://help.github.com/articles/dealing-with-line-endings/ +# +# Linux start script should use lf +/gradlew text eol=lf + +# These are Windows script files and should use crlf +*.bat text eol=crlf + diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/.gitignore b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/.gitignore new file mode 100644 index 00000000000..1b6985c0094 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/.gitignore @@ -0,0 +1,5 @@ +# Ignore Gradle project-specific cache directory +.gradle + +# Ignore Gradle build output directory +build diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/build.gradle.kts b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/build.gradle.kts new file mode 100644 index 00000000000..bd48ad3b33a --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/build.gradle.kts @@ -0,0 +1,30 @@ +/* + * This file was generated by the Gradle 'init' task. + * + * This generated file contains a sample Java application project to get you started. + * For more details take a look at the 'Building Java & JVM projects' chapter in the Gradle + * User Manual available at https://docs.gradle.org/7.5.1/userguide/building_java_projects.html + */ + +plugins { + // Apply the application plugin to add support for building a CLI application in Java. + application +} + +repositories { + // Use Maven Central for resolving dependencies. + mavenCentral() +} + +dependencies { + // Use JUnit test framework. + testImplementation("junit:junit:4.13.2") + + // This dependency is used by the application. + implementation("com.google.guava:guava:31.0.1-jre") +} + +application { + // Define the main class for the application. + mainClass.set("test.App") +} diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/src/main/java/test/App.java b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/src/main/java/test/App.java new file mode 100644 index 00000000000..8567ada216d --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/src/main/java/test/App.java @@ -0,0 +1,14 @@ +/* + * This Java source file was generated by the Gradle 'init' task. + */ +package test; + +public class App { + public String getGreeting() { + return "Hello World!"; + } + + public static void main(String[] args) { + System.out.println(new App().getGreeting()); + } +} diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/src/test/java/test/AppTest.java b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/src/test/java/test/AppTest.java new file mode 100644 index 00000000000..4b10bb0ccf1 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/app/src/test/java/test/AppTest.java @@ -0,0 +1,14 @@ +/* + * This Java source file was generated by the Gradle 'init' task. + */ +package test; + +import org.junit.Test; +import static org.junit.Assert.*; + +public class AppTest { + @Test public void appHasAGreeting() { + App classUnderTest = new App(); + assertNotNull("app should have a greeting", classUnderTest.getGreeting()); + } +} diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/force_sequential_test_execution new file mode 100644 index 00000000000..b0e2500b259 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/force_sequential_test_execution @@ -0,0 +1,3 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradle/wrapper/gradle-wrapper.jar b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 00000000000..249e5832f09 Binary files /dev/null and b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradle/wrapper/gradle-wrapper.jar differ diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradle/wrapper/gradle-wrapper.properties b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 00000000000..ae04661ee73 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,5 @@ +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-7.5.1-bin.zip +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradlew b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradlew new file mode 100755 index 00000000000..a69d9cb6c20 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradlew @@ -0,0 +1,240 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/master/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit + +APP_NAME="Gradle" +APP_BASE_NAME=${0##*/} + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + +# Collect all arguments for the java command; +# * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of +# shell script including quotes and variable substitutions, so put them in +# double quotes to make sure that they get re-expanded; and +# * put everything else in single quotes, so that it's not re-expanded. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradlew.bat b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradlew.bat new file mode 100644 index 00000000000..f127cfd49d4 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/gradlew.bat @@ -0,0 +1,91 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/settings.gradle.kts b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/settings.gradle.kts new file mode 100644 index 00000000000..d756f237adf --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/settings.gradle.kts @@ -0,0 +1,11 @@ +/* + * This file was generated by the Gradle 'init' task. + * + * The settings file is used to specify which projects to include in your build. + * + * Detailed information about configuring a multi-project build in Gradle can be found + * in the user manual at https://docs.gradle.org/7.5.1/userguide/multi_project_builds.html + */ + +rootProject.name = "test" +include("app") diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.expected b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.expected new file mode 100644 index 00000000000..37d007b86d6 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.expected @@ -0,0 +1,4 @@ +xmlFiles +#select +| app/src/main/java/test/App.java:0:0:0:0 | App | +| app/src/test/java/test/AppTest.java:0:0:0:0 | AppTest | diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.py b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.py new file mode 100644 index 00000000000..ab8845cbd73 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.py @@ -0,0 +1,5 @@ +import sys + +from create_database_utils import * + +run_codeql_database_create([], lang="java") diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.ql b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.ql new file mode 100644 index 00000000000..c11b8fba707 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample-kotlin-script/test.ql @@ -0,0 +1,7 @@ +import java + +from File f +where f.isSourceFile() +select f + +query predicate xmlFiles(XmlFile x) { any() } diff --git a/java/ql/integration-tests/all-platforms/java/gradle-sample/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/gradle-sample/force_sequential_test_execution new file mode 100644 index 00000000000..b0e2500b259 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/gradle-sample/force_sequential_test_execution @@ -0,0 +1,3 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. diff --git a/java/ql/integration-tests/all-platforms/java/partial-gradle-sample/force_sequential_test_execution b/java/ql/integration-tests/all-platforms/java/partial-gradle-sample/force_sequential_test_execution new file mode 100644 index 00000000000..b0e2500b259 --- /dev/null +++ b/java/ql/integration-tests/all-platforms/java/partial-gradle-sample/force_sequential_test_execution @@ -0,0 +1,3 @@ +# We currently have a bug where gradle tests become flaky when executed in parallel +# - sometimes, gradle fails to connect to the gradle daemon. +# Therefore, force this test to run sequentially. diff --git a/java/ql/integration-tests/all-platforms/kotlin/annotation-id-consistency/PrintAst.expected b/java/ql/integration-tests/all-platforms/kotlin/annotation-id-consistency/PrintAst.expected index 751777f3748..6da5da6d522 100644 --- a/java/ql/integration-tests/all-platforms/kotlin/annotation-id-consistency/PrintAst.expected +++ b/java/ql/integration-tests/all-platforms/kotlin/annotation-id-consistency/PrintAst.expected @@ -146,25 +146,24 @@ test.kt: # 19| 1: [Annotation] VarargAnnotation # 0| 1: [ArrayInit] {...} # 20| 2: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 +# 20| 1: [ArrayInit] {...} +# 20| 1: [IntegerLiteral] 1 # 21| 3: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [IntegerLiteral] 2 +# 21| 1: [ArrayInit] {...} +# 21| 1: [IntegerLiteral] 1 +# 21| 2: [IntegerLiteral] 2 # 22| 4: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [IntegerLiteral] 2 -# 0| 3: [IntegerLiteral] 3 +# 22| 1: [ArrayInit] {...} +# 22| 1: [IntegerLiteral] 1 +# 22| 2: [IntegerLiteral] 2 +# 22| 3: [IntegerLiteral] 3 # 23| 5: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [IntegerLiteral] 2 -# 0| 3: [IntegerLiteral] 3 +# 23| 1: [ArrayInit] {...} +# 23| 1: [IntegerLiteral] 1 +# 23| 2: [IntegerLiteral] 2 +# 23| 3: [IntegerLiteral] 3 # 17| 2: [Annotation] Ann1 -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [Annotation] Ann2 +# 0| 1: [Annotation] Ann2 # 0| 1: [StringLiteral] "Hello" # 0| 2: [TypeLiteral] String.class # 0| 0: [TypeAccess] String @@ -182,16 +181,17 @@ test.kt: # 0| 0: [TypeAccess] String # 0| 2: [TypeLiteral] int.class # 0| 0: [TypeAccess] int -# 0| 3: [VarAccess] DayOfWeek.MONDAY -# 0| -1: [TypeAccess] DayOfWeek +# 17| 2: [IntegerLiteral] 1 +# 17| 3: [VarAccess] DayOfWeek.MONDAY +# 17| -1: [TypeAccess] DayOfWeek # 18| 3: [Annotation] GenericAnnotation -# 0| 1: [TypeLiteral] String.class -# 0| 0: [TypeAccess] String -# 0| 2: [ArrayInit] {...} -# 0| 1: [TypeLiteral] String.class -# 0| 0: [TypeAccess] String -# 0| 2: [TypeLiteral] String.class -# 0| 0: [TypeAccess] String +# 18| 1: [TypeLiteral] String.class +# 18| 0: [TypeAccess] String +# 18| 2: [ArrayInit] {...} +# 18| 1: [TypeLiteral] String.class +# 18| 0: [TypeAccess] String +# 18| 2: [TypeLiteral] String.class +# 18| 0: [TypeAccess] String # 24| 4: [Annotation] AnnWithDefaults # 0| 1: [IntegerLiteral] 1 # 0| 2: [StringLiteral] "hello" @@ -211,25 +211,24 @@ test.kt: # 29| 1: [Annotation] VarargAnnotation # 0| 1: [ArrayInit] {...} # 30| 2: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 +# 30| 1: [ArrayInit] {...} +# 30| 1: [IntegerLiteral] 1 # 31| 3: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [IntegerLiteral] 2 +# 31| 1: [ArrayInit] {...} +# 31| 1: [IntegerLiteral] 1 +# 31| 2: [IntegerLiteral] 2 # 32| 4: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [IntegerLiteral] 2 -# 0| 3: [IntegerLiteral] 3 +# 32| 1: [ArrayInit] {...} +# 32| 1: [IntegerLiteral] 1 +# 32| 2: [IntegerLiteral] 2 +# 32| 3: [IntegerLiteral] 3 # 33| 5: [Annotation] VarargAnnotation -# 0| 1: [ArrayInit] {...} -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [IntegerLiteral] 2 -# 0| 3: [IntegerLiteral] 3 +# 33| 1: [ArrayInit] {...} +# 33| 1: [IntegerLiteral] 1 +# 33| 2: [IntegerLiteral] 2 +# 33| 3: [IntegerLiteral] 3 # 27| 2: [Annotation] Ann1 -# 0| 1: [IntegerLiteral] 1 -# 0| 2: [Annotation] Ann2 +# 0| 1: [Annotation] Ann2 # 0| 1: [StringLiteral] "Hello" # 0| 2: [TypeLiteral] String.class # 0| 0: [TypeAccess] String @@ -247,16 +246,17 @@ test.kt: # 0| 0: [TypeAccess] String # 0| 2: [TypeLiteral] int.class # 0| 0: [TypeAccess] int -# 0| 3: [VarAccess] DayOfWeek.MONDAY -# 0| -1: [TypeAccess] DayOfWeek +# 27| 2: [IntegerLiteral] 1 +# 27| 3: [VarAccess] DayOfWeek.MONDAY +# 27| -1: [TypeAccess] DayOfWeek # 28| 3: [Annotation] GenericAnnotation -# 0| 1: [TypeLiteral] String.class -# 0| 0: [TypeAccess] String -# 0| 2: [ArrayInit] {...} -# 0| 1: [TypeLiteral] String.class -# 0| 0: [TypeAccess] String -# 0| 2: [TypeLiteral] String.class -# 0| 0: [TypeAccess] String +# 28| 1: [TypeLiteral] String.class +# 28| 0: [TypeAccess] String +# 28| 2: [ArrayInit] {...} +# 28| 1: [TypeLiteral] String.class +# 28| 0: [TypeAccess] String +# 28| 2: [TypeLiteral] String.class +# 28| 0: [TypeAccess] String # 34| 4: [Annotation] AnnWithDefaults # 0| 1: [IntegerLiteral] 1 # 0| 2: [StringLiteral] "hello" @@ -279,7 +279,7 @@ test.kt: # 40| 11: [Class] HasKotlinDeprecatedAnnotationUsedByJava #-----| -3: (Annotations) # 40| 1: [Annotation] Deprecated -# 0| 1: [StringLiteral] "Kotlin deprecation message 1" +# 40| 1: [StringLiteral] "Kotlin deprecation message 1" # 41| 1: [Constructor] HasKotlinDeprecatedAnnotationUsedByJava # 40| 5: [BlockStmt] { ... } # 40| 0: [SuperConstructorInvocationStmt] super(...) @@ -294,7 +294,7 @@ test.kt: # 46| 13: [Class] HasKotlinDeprecatedAnnotationUsedByKotlin #-----| -3: (Annotations) # 46| 1: [Annotation] Deprecated -# 0| 1: [StringLiteral] "Kotlin deprecation message 2" +# 46| 1: [StringLiteral] "Kotlin deprecation message 2" # 47| 1: [Constructor] HasKotlinDeprecatedAnnotationUsedByKotlin # 46| 5: [BlockStmt] { ... } # 46| 0: [SuperConstructorInvocationStmt] super(...) diff --git a/java/ql/integration-tests/all-platforms/kotlin/logs/index_logs.py b/java/ql/integration-tests/all-platforms/kotlin/logs/index_logs.py index a02c8b3f75a..9aa6ad13863 100644 --- a/java/ql/integration-tests/all-platforms/kotlin/logs/index_logs.py +++ b/java/ql/integration-tests/all-platforms/kotlin/logs/index_logs.py @@ -32,7 +32,7 @@ with open('logs.csv', 'w', newline='') as f_out: j = json.loads(line) msg = j['message'] msg = re.sub(r'(?<=Extraction for invocation TRAP file ).*[\\/]kt-db[\\/]trap[\\/]java[\\/]invocations[\\/]kotlin\..*\.trap', '', msg) - msg = re.sub('(?<=Kotlin version )[0-9.]+', '', msg) + msg = re.sub('(?<=Kotlin version )[0-9.]+(-[a-zA-Z0-9.]+)?', '', msg) if msg.startswith('Peak memory: '): # Peak memory information varies from run to run, so just ignore it continue diff --git a/java/ql/integration-tests/linux-only/kotlin/custom_plugin/plugin/Plugin.kt b/java/ql/integration-tests/linux-only/kotlin/custom_plugin/plugin/Plugin.kt index d80801974e2..f45b4804393 100644 --- a/java/ql/integration-tests/linux-only/kotlin/custom_plugin/plugin/Plugin.kt +++ b/java/ql/integration-tests/linux-only/kotlin/custom_plugin/plugin/Plugin.kt @@ -2,11 +2,13 @@ package com.github.codeql import com.intellij.mock.MockProject import org.jetbrains.kotlin.backend.common.IrElementTransformerVoidWithContext +import org.jetbrains.kotlin.backend.common.extensions.FirIncompatiblePluginAPI import org.jetbrains.kotlin.backend.common.extensions.IrGenerationExtension import org.jetbrains.kotlin.backend.common.extensions.IrPluginContext import org.jetbrains.kotlin.backend.common.ir.addDispatchReceiver import org.jetbrains.kotlin.backend.common.lower.DeclarationIrBuilder import org.jetbrains.kotlin.compiler.plugin.ComponentRegistrar +import org.jetbrains.kotlin.compiler.plugin.ExperimentalCompilerApi import org.jetbrains.kotlin.config.CompilerConfiguration import org.jetbrains.kotlin.descriptors.ClassKind import org.jetbrains.kotlin.descriptors.DescriptorVisibilities @@ -35,6 +37,7 @@ import org.jetbrains.kotlin.ir.util.defaultType import org.jetbrains.kotlin.name.FqName import org.jetbrains.kotlin.name.Name +@OptIn(ExperimentalCompilerApi::class) class TestComponentRegistrar : ComponentRegistrar { override fun registerProjectComponents( project: MockProject, @@ -188,6 +191,7 @@ class IrAdder : IrGenerationExtension { } private fun addFunWithUnsafeCoerce(declaration: IrClass) { + @OptIn(FirIncompatiblePluginAPI::class) val uintType = pluginContext.referenceClass(FqName("kotlin.UInt"))!!.owner.typeWith() declaration.declarations.add(pluginContext.irFactory.buildFun { name = Name.identifier("") @@ -264,6 +268,7 @@ class IrAdder : IrGenerationExtension { name = Name.identifier("start") origin = IrDeclarationOrigin.IR_EXTERNAL_JAVA_DECLARATION_STUB modality = Modality.FINAL + @OptIn(FirIncompatiblePluginAPI::class) returnType = pluginContext.referenceClass(FqName("java.lang.Process"))!!.owner.defaultType }.apply { addDispatchReceiver { type = processBuilderStubType } diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index f71903756e0..363d569e8a2 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 0.5.1 + +### Minor Analysis Improvements + +* Added sink models for the constructors of `org.springframework.jdbc.object.MappingSqlQuery` and `org.springframework.jdbc.object.MappingSqlQueryWithParameters`. +* Added more dataflow models for frequently-used JDK APIs. +* Removed summary model for `java.lang.String#endsWith(String)` and added neutral model for this API. +* Added additional taint step for `java.lang.String#endsWith(String)` to `ConditionalBypassFlowConfig`. +* Added `AllowContentAccessMethod` to represent the `setAllowContentAccess` method of the `android.webkit.WebSettings` class. +* Added an external flow source for the parameters of methods annotated with `android.webkit.JavascriptInterface`. + ## 0.5.0 ### Minor Analysis Improvements diff --git a/java/ql/lib/change-notes/2023-01-05-fix-mad-typos.md b/java/ql/lib/change-notes/2023-01-05-fix-mad-typos.md deleted file mode 100644 index 8c5281ff27f..00000000000 --- a/java/ql/lib/change-notes/2023-01-05-fix-mad-typos.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added sink models for the constructors of `org.springframework.jdbc.object.MappingSqlQuery` and `org.springframework.jdbc.object.MappingSqlQueryWithParameters`. diff --git a/java/ql/lib/change-notes/released/0.5.1.md b/java/ql/lib/change-notes/released/0.5.1.md new file mode 100644 index 00000000000..d8baf4b13fc --- /dev/null +++ b/java/ql/lib/change-notes/released/0.5.1.md @@ -0,0 +1,10 @@ +## 0.5.1 + +### Minor Analysis Improvements + +* Added sink models for the constructors of `org.springframework.jdbc.object.MappingSqlQuery` and `org.springframework.jdbc.object.MappingSqlQueryWithParameters`. +* Added more dataflow models for frequently-used JDK APIs. +* Removed summary model for `java.lang.String#endsWith(String)` and added neutral model for this API. +* Added additional taint step for `java.lang.String#endsWith(String)` to `ConditionalBypassFlowConfig`. +* Added `AllowContentAccessMethod` to represent the `setAllowContentAccess` method of the `android.webkit.WebSettings` class. +* Added an external flow source for the parameters of methods annotated with `android.webkit.JavascriptInterface`. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 30e271c5361..0bf7024c337 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.5.1 diff --git a/java/ql/lib/ext/java.io.model.yml b/java/ql/lib/ext/java.io.model.yml index 87d6c6311e7..a0e7777c3b5 100644 --- a/java/ql/lib/ext/java.io.model.yml +++ b/java/ql/lib/ext/java.io.model.yml @@ -63,6 +63,7 @@ extensions: - ["java.io", "File", True, "getAbsolutePath", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.io", "File", True, "getCanonicalFile", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.io", "File", True, "getCanonicalPath", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] + - ["java.io", "File", True, "getName", "()", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.io", "File", True, "toPath", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.io", "File", True, "toString", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.io", "File", True, "toURI", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] @@ -74,6 +75,7 @@ extensions: - ["java.io", "InputStream", True, "readNBytes", "(int)", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.io", "InputStream", True, "transferTo", "(OutputStream)", "", "Argument[-1]", "Argument[0]", "taint", "manual"] - ["java.io", "InputStreamReader", False, "InputStreamReader", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] + - ["java.io", "IOException", False, "IOException", "(String)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "value", "manual"] - ["java.io", "ObjectInput", True, "read", "", "", "Argument[-1]", "Argument[0]", "taint", "manual"] - ["java.io", "ObjectInputStream", False, "ObjectInputStream", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] - ["java.io", "OutputStream", True, "write", "(byte[])", "", "Argument[0]", "Argument[-1]", "taint", "manual"] @@ -84,3 +86,9 @@ extensions: - ["java.io", "StringReader", False, "StringReader", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] - ["java.io", "Writer", True, "toString", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.io", "Writer", True, "write", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] + + - addsTo: + pack: codeql/java-all + extensible: neutralModel + data: + - ["java.io", "File", "exists", "()", "manual"] diff --git a/java/ql/lib/ext/java.lang.model.yml b/java/ql/lib/ext/java.lang.model.yml index 9550c9e139d..0f25c8d0cf5 100644 --- a/java/ql/lib/ext/java.lang.model.yml +++ b/java/ql/lib/ext/java.lang.model.yml @@ -37,9 +37,10 @@ extensions: - ["java.lang", "CharSequence", True, "charAt", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.lang", "CharSequence", True, "subSequence", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.lang", "CharSequence", True, "toString", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] + - ["java.lang", "Exception", False, "Exception", "(String)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "value", "manual"] - ["java.lang", "IllegalArgumentException", False, "IllegalArgumentException", "(String)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "value", "manual"] - ["java.lang", "IllegalStateException", False, "IllegalStateException", "(String)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "value", "manual"] - - ["java.lang", "Integer", False, "parseInt", "(String)", "", "Argument[0]", "ReturnValue", "taint", "manual"] + - ["java.lang", "IndexOutOfBoundsException", False, "IndexOutOfBoundsException", "(String)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "value", "manual"] - ["java.lang", "Iterable", True, "forEach", "(Consumer)", "", "Argument[-1].Element", "Argument[0].Parameter[0]", "value", "manual"] - ["java.lang", "Iterable", True, "iterator", "()", "", "Argument[-1].Element", "ReturnValue.Element", "value", "manual"] - ["java.lang", "Iterable", True, "spliterator", "()", "", "Argument[-1].Element", "ReturnValue.Element", "value", "manual"] @@ -47,12 +48,13 @@ extensions: - ["java.lang", "Object", True, "clone", "", "", "Argument[-1].MapKey", "ReturnValue.MapKey", "value", "manual"] - ["java.lang", "Object", True, "clone", "", "", "Argument[-1].MapValue", "ReturnValue.MapValue", "value", "manual"] - ["java.lang", "RuntimeException", False, "RuntimeException", "(String)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "value", "manual"] + - ["java.lang", "RuntimeException", False, "RuntimeException", "(String,Throwable)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "value", "manual"] + - ["java.lang", "RuntimeException", False, "RuntimeException", "(String,Throwable)", "", "Argument[1]", "Argument[-1].SyntheticField[java.lang.Throwable.cause]", "value", "manual"] - ["java.lang", "RuntimeException", False, "RuntimeException", "(Throwable)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.cause]", "value", "manual"] - ["java.lang", "String", False, "String", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] - ["java.lang", "String", False, "concat", "(String)", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.lang", "String", False, "concat", "(String)", "", "Argument[0]", "ReturnValue", "taint", "manual"] - ["java.lang", "String", False, "copyValueOf", "", "", "Argument[0]", "ReturnValue", "taint", "manual"] - - ["java.lang", "String", False, "endsWith", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.lang", "String", False, "format", "(Locale,String,Object[])", "", "Argument[1]", "ReturnValue", "taint", "manual"] - ["java.lang", "String", False, "format", "(Locale,String,Object[])", "", "Argument[2].ArrayElement", "ReturnValue", "taint", "manual"] - ["java.lang", "String", False, "format", "(String,Object[])", "", "Argument[0]", "ReturnValue", "taint", "manual"] @@ -87,34 +89,56 @@ extensions: - ["java.lang", "String", False, "valueOf", "(char)", "", "Argument[0]", "ReturnValue", "taint", "manual"] - ["java.lang", "String", False, "valueOf", "(char[])", "", "Argument[0]", "ReturnValue", "taint", "manual"] - ["java.lang", "String", False, "valueOf", "(char[],int,int)", "", "Argument[0]", "ReturnValue", "taint", "manual"] - - ["java.lang", "String", False, "valueOf", "(int)", "", "Argument[0]", "ReturnValue", "taint", "manual"] - ["java.lang", "StringBuffer", True, "StringBuffer", "(CharSequence)", "", "Argument[0]", "Argument[-1]", "taint", "manual"] - ["java.lang", "StringBuffer", True, "StringBuffer", "(String)", "", "Argument[0]", "Argument[-1]", "taint", "manual"] - ["java.lang", "StringBuilder", True, "StringBuilder", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] - ["java.lang", "System", False, "arraycopy", "", "", "Argument[0]", "Argument[2]", "taint", "manual"] - ["java.lang", "Throwable", False, "Throwable", "(Throwable)", "", "Argument[0]", "Argument[-1].SyntheticField[java.lang.Throwable.cause]", "value", "manual"] - - ["java.lang", "Throwable", False, "getCause", "()", "", "Argument[-1].SyntheticField[java.lang.Throwable.cause]", "ReturnValue", "value", "manual"] - - ["java.lang", "Throwable", False, "getMessage", "()", "", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "ReturnValue", "value", "manual"] + - ["java.lang", "Throwable", True, "getCause", "()", "", "Argument[-1].SyntheticField[java.lang.Throwable.cause]", "ReturnValue", "value", "manual"] + - ["java.lang", "Throwable", True, "getMessage", "()", "", "Argument[-1].SyntheticField[java.lang.Throwable.message]", "ReturnValue", "value", "manual"] - addsTo: pack: codeql/java-all extensible: neutralModel data: + - ["java.lang", "AbstractStringBuilder", "length", "()", "manual"] + - ["java.lang", "Boolean", "equals", "(Object)", "manual"] + - ["java.lang", "Class", "getClassLoader", "()", "manual"] - ["java.lang", "Class", "getName", "()", "manual"] - ["java.lang", "Class", "getSimpleName", "()", "manual"] + - ["java.lang", "Class", "isAssignableFrom", "(Class)", "manual"] - ["java.lang", "Enum", "Enum", "(String,int)", "manual"] - ["java.lang", "Enum", "equals", "(Object)", "manual"] - ["java.lang", "Enum", "name", "()", "manual"] - ["java.lang", "Enum", "toString", "()", "manual"] + - ["java.lang", "Long", "equals", "(Object)", "manual"] - ["java.lang", "Object", "equals", "(Object)", "manual"] - ["java.lang", "Object", "getClass", "()", "manual"] - ["java.lang", "Object", "hashCode", "()", "manual"] - ["java.lang", "Object", "toString", "()", "manual"] - ["java.lang", "String", "contains", "(CharSequence)", "manual"] + - ["java.lang", "String", "endsWith", "(String)", "manual"] - ["java.lang", "String", "equals", "(Object)", "manual"] - ["java.lang", "String", "equalsIgnoreCase", "(String)", "manual"] - ["java.lang", "String", "hashCode", "()", "manual"] + - ["java.lang", "String", "indexOf", "(String)", "manual"] - ["java.lang", "String", "isEmpty", "()", "manual"] - ["java.lang", "String", "length", "()", "manual"] - ["java.lang", "String", "startsWith", "(String)", "manual"] - ["java.lang", "System", "currentTimeMillis", "()", "manual"] + - ["java.lang", "System", "nanoTime", "()", "manual"] + - ["java.lang", "Thread", "currentThread", "()", "manual"] + - ["java.lang", "Thread", "sleep", "(long)", "manual"] + + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.lang", "Integer", "intValue", "()", "manual"] # taint-numeric + - ["java.lang", "Integer", "parseInt", "(String)", "manual"] # taint-numeric + - ["java.lang", "Integer", "toString", "(int)", "manual"] # taint-numeric + - ["java.lang", "Integer", "valueOf", "(int)", "manual"] # taint-numeric + - ["java.lang", "Long", "longValue", "()", "manual"] # taint-numeric + - ["java.lang", "Long", "parseLong", "(String)", "manual"] # taint-numeric + - ["java.lang", "Long", "toString", "()", "manual"] # taint-numeric + - ["java.lang", "Math", "min", "(int,int)", "manual"] # value-numeric + - ["java.lang", "String", "valueOf", "(int)", "manual"] # taint-numeric + - ["java.lang", "String", "valueOf", "(long)", "manual"] # taint-numeric diff --git a/java/ql/lib/ext/java.math.model.yml b/java/ql/lib/ext/java.math.model.yml index e491982b818..1d45a4076bf 100644 --- a/java/ql/lib/ext/java.math.model.yml +++ b/java/ql/lib/ext/java.math.model.yml @@ -1,6 +1,12 @@ extensions: - addsTo: pack: codeql/java-all - extensible: summaryModel + extensible: neutralModel data: - - ["java.math", "BigDecimal", False, "BigDecimal", "(String)", "", "Argument[0]", "Argument[-1]", "taint", "manual"] + - ["java.math", "BigDecimal", "compareTo", "(BigDecimal)", "manual"] + + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.math", "BigDecimal", "BigDecimal", "(String)", "manual"] # taint-numeric + - ["java.math", "BigDecimal", "valueOf", "(double)", "manual"] # taint-numeric + - ["java.math", "BigDecimal", "valueOf", "(long)", "manual"] # taint-numeric diff --git a/java/ql/lib/ext/java.sql.model.yml b/java/ql/lib/ext/java.sql.model.yml index 3a377361417..bf544fdb8e7 100644 --- a/java/ql/lib/ext/java.sql.model.yml +++ b/java/ql/lib/ext/java.sql.model.yml @@ -19,4 +19,16 @@ extensions: pack: codeql/java-all extensible: summaryModel data: + - ["java.sql", "PreparedStatement", True, "setString", "(int,String)", "", "Argument[1]", "Argument[-1]", "value", "manual"] - ["java.sql", "ResultSet", True, "getString", "(String)", "", "Argument[-1]", "ReturnValue", "taint", "manual"] + + - addsTo: + pack: codeql/java-all + extensible: neutralModel + data: + - ["java.sql", "ResultSet", "next", "()", "manual"] + + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.sql", "PreparedStatement", "setInt", "(int,int)", "manual"] # value-numeric + - ["java.sql", "ResultSet", "getInt", "(String)", "manual"] # taint-numeric diff --git a/java/ql/lib/ext/java.text.model.yml b/java/ql/lib/ext/java.text.model.yml new file mode 100644 index 00000000000..bbb01596f17 --- /dev/null +++ b/java/ql/lib/ext/java.text.model.yml @@ -0,0 +1,9 @@ +extensions: + - addsTo: + pack: codeql/java-all + extensible: neutralModel + data: + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.text", "DateFormat", "format", "(Date)", "manual"] # taint-numeric + - ["java.text", "SimpleDateFormat", "SimpleDateFormat", "(String)", "manual"] # taint-numeric diff --git a/java/ql/lib/ext/java.time.model.yml b/java/ql/lib/ext/java.time.model.yml new file mode 100644 index 00000000000..002240c6488 --- /dev/null +++ b/java/ql/lib/ext/java.time.model.yml @@ -0,0 +1,11 @@ +extensions: + - addsTo: + pack: codeql/java-all + extensible: neutralModel + data: + - ["java.time", "Instant", "now", "()", "manual"] + - ["java.time", "ZonedDateTime", "now", "()", "manual"] + + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.time", "LocalDate", "of", "(int,int,int)", "manual"] # taint-numeric diff --git a/java/ql/lib/ext/java.util.concurrent.atomic.model.yml b/java/ql/lib/ext/java.util.concurrent.atomic.model.yml new file mode 100644 index 00000000000..7dd3d13b301 --- /dev/null +++ b/java/ql/lib/ext/java.util.concurrent.atomic.model.yml @@ -0,0 +1,16 @@ +extensions: + - addsTo: + pack: codeql/java-all + extensible: summaryModel + data: + - ["java.util.concurrent.atomic", "AtomicReference", False, "AtomicReference", "(Object)", "", "Argument[0]", "Argument[-1].SyntheticField[java.util.concurrent.atomic.AtomicReference.value]", "value", "manual"] + - ["java.util.concurrent.atomic", "AtomicReference", False, "get", "()", "", "Argument[-1].SyntheticField[java.util.concurrent.atomic.AtomicReference.value]", "ReturnValue", "value", "manual"] + + - addsTo: + pack: codeql/java-all + extensible: neutralModel + data: + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.util.concurrent.atomic", "AtomicInteger", "AtomicInteger", "(int)", "manual"] # value-numeric + - ["java.util.concurrent.atomic", "AtomicInteger", "get", "()", "manual"] # value-numeric diff --git a/java/ql/lib/ext/java.util.concurrent.model.yml b/java/ql/lib/ext/java.util.concurrent.model.yml index 9c202220dde..3d199321dd6 100644 --- a/java/ql/lib/ext/java.util.concurrent.model.yml +++ b/java/ql/lib/ext/java.util.concurrent.model.yml @@ -21,3 +21,14 @@ extensions: - ["java.util.concurrent", "TransferQueue", True, "transfer", "(Object)", "", "Argument[0]", "Argument[-1].Element", "value", "manual"] - ["java.util.concurrent", "TransferQueue", True, "tryTransfer", "(Object)", "", "Argument[0]", "Argument[-1].Element", "value", "manual"] - ["java.util.concurrent", "TransferQueue", True, "tryTransfer", "(Object,long,TimeUnit)", "", "Argument[0]", "Argument[-1].Element", "value", "manual"] + + - addsTo: + pack: codeql/java-all + extensible: neutralModel + data: + - ["java.util.concurrent", "CountDownLatch", "countDown", "()", "manual"] + + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.util.concurrent", "CountDownLatch", "CountDownLatch", "(int)", "manual"] # value-numeric + - ["java.util.concurrent", "CountDownLatch", "getCount", "()", "manual"] # value-numeric diff --git a/java/ql/lib/ext/java.util.model.yml b/java/ql/lib/ext/java.util.model.yml index c0de6b67db5..bef47b5665e 100644 --- a/java/ql/lib/ext/java.util.model.yml +++ b/java/ql/lib/ext/java.util.model.yml @@ -335,6 +335,8 @@ extensions: - ["java.util", "Stack", True, "peek", "()", "", "Argument[-1].Element", "ReturnValue", "value", "manual"] - ["java.util", "Stack", True, "pop", "()", "", "Argument[-1].Element", "ReturnValue", "value", "manual"] - ["java.util", "Stack", True, "push", "(Object)", "", "Argument[0]", "Argument[-1].Element", "value", "manual"] + - ["java.util", "StringJoiner", False, "add", "(CharSequence)", "", "Argument[-1]", "ReturnValue", "taint", "manual"] + - ["java.util", "StringJoiner", False, "add", "(CharSequence)", "", "Argument[0]", "ReturnValue", "taint", "manual"] - ["java.util", "StringTokenizer", False, "StringTokenizer", "", "", "Argument[0]", "Argument[-1]", "taint", "manual"] - ["java.util", "StringTokenizer", False, "nextElement", "()", "", "Argument[-1]", "ReturnValue", "taint", "manual"] - ["java.util", "StringTokenizer", False, "nextToken", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"] @@ -360,8 +362,13 @@ extensions: pack: codeql/java-all extensible: neutralModel data: - - ["java.util", "Collections", "emptyList", "()", "manual"] + - ["java.util", "ArrayList", "ArrayList", "(int)", "manual"] + - ["java.util", "ArrayList", "size", "()", "manual"] + - ["java.util", "Collection", "isEmpty", "()", "manual"] - ["java.util", "Collection", "size", "()", "manual"] + - ["java.util", "Collections", "emptyList", "()", "manual"] + - ["java.util", "Collections", "emptyMap", "()", "manual"] + - ["java.util", "Collections", "emptySet", "()", "manual"] - ["java.util", "Iterator", "hasNext", "()", "manual"] - ["java.util", "List", "contains", "(Object)", "manual"] - ["java.util", "List", "isEmpty", "()", "manual"] @@ -371,6 +378,7 @@ extensions: - ["java.util", "Map", "size", "()", "manual"] - ["java.util", "Objects", "equals", "(Object,Object)", "manual"] - ["java.util", "Objects", "hash", "(Object[])", "manual"] + - ["java.util", "Objects", "nonNull", "(Object)", "manual"] - ["java.util", "Optional", "empty", "()", "manual"] - ["java.util", "Optional", "isPresent", "()", "manual"] - ["java.util", "Set", "contains", "(Object)", "manual"] @@ -378,3 +386,13 @@ extensions: - ["java.util", "Set", "size", "()", "manual"] - ["java.util", "UUID", "randomUUID", "()", "manual"] - ["java.util", "UUID", "toString", "()", "manual"] + + # The below APIs are currently being stored as neutral models since `WithoutElement` has not yet been implemented for Java. + # When `WithoutElement` is implemented, these should be changed to summary models of the form `Argument[-1].WithoutElement -> Argument[-1]`. + - ["java.util", "List", "clear", "()", "manual"] + - ["java.util", "Map", "clear", "()", "manual"] + + # The below APIs have numeric flow and are currently being stored as neutral models. + # These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future. + - ["java.util", "Date", "Date", "(long)", "manual"] # taint-numeric + - ["java.util", "Date", "getTime", "()", "manual"] # taint-numeric diff --git a/java/ql/lib/ext/java.util.stream.model.yml b/java/ql/lib/ext/java.util.stream.model.yml index 12367a7b620..b44c3391075 100644 --- a/java/ql/lib/ext/java.util.stream.model.yml +++ b/java/ql/lib/ext/java.util.stream.model.yml @@ -93,3 +93,4 @@ extensions: extensible: neutralModel data: - ["java.util.stream", "Collectors", "toList", "()", "manual"] + - ["java.util.stream", "Collectors", "toSet", "()", "manual"] diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 6379ef04328..bc2167e07cf 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 0.5.1-dev +version: 0.5.2-dev groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/lib/semmle/code/java/Expr.qll b/java/ql/lib/semmle/code/java/Expr.qll index a10da9ecc9f..78eda1dba8d 100644 --- a/java/ql/lib/semmle/code/java/Expr.qll +++ b/java/ql/lib/semmle/code/java/Expr.qll @@ -366,11 +366,11 @@ class CompileTimeConstantExpr extends Expr { or b instanceof SubExpr and result = v1 - v2 or - b instanceof LShiftExpr and result = v1.bitShiftLeft(v2) + b instanceof LeftShiftExpr and result = v1.bitShiftLeft(v2) or - b instanceof RShiftExpr and result = v1.bitShiftRightSigned(v2) + b instanceof RightShiftExpr and result = v1.bitShiftRightSigned(v2) or - b instanceof URShiftExpr and result = v1.bitShiftRight(v2) + b instanceof UnsignedRightShiftExpr and result = v1.bitShiftRight(v2) or b instanceof AndBitwiseExpr and result = v1.bitAnd(v2) or @@ -623,26 +623,35 @@ class AssignXorExpr extends AssignOp, @assignxorexpr { } /** A compound assignment expression using the `<<=` operator. */ -class AssignLShiftExpr extends AssignOp, @assignlshiftexpr { +class AssignLeftShiftExpr extends AssignOp, @assignlshiftexpr { override string getOp() { result = "<<=" } - override string getAPrimaryQlClass() { result = "AssignLShiftExpr" } + override string getAPrimaryQlClass() { result = "AssignLeftShiftExpr" } } +/** DEPRECATED: Alias for AssignLeftShiftExpr. */ +deprecated class AssignLShiftExpr = AssignLeftShiftExpr; + /** A compound assignment expression using the `>>=` operator. */ -class AssignRShiftExpr extends AssignOp, @assignrshiftexpr { +class AssignRightShiftExpr extends AssignOp, @assignrshiftexpr { override string getOp() { result = ">>=" } - override string getAPrimaryQlClass() { result = "AssignRShiftExpr" } + override string getAPrimaryQlClass() { result = "AssignRightShiftExpr" } } +/** DEPRECATED: Alias for AssignRightShiftExpr. */ +deprecated class AssignRShiftExpr = AssignRightShiftExpr; + /** A compound assignment expression using the `>>>=` operator. */ -class AssignURShiftExpr extends AssignOp, @assignurshiftexpr { +class AssignUnsignedRightShiftExpr extends AssignOp, @assignurshiftexpr { override string getOp() { result = ">>>=" } - override string getAPrimaryQlClass() { result = "AssignURShiftExpr" } + override string getAPrimaryQlClass() { result = "AssignUnsignedRightShiftExpr" } } +/** DEPRECATED: Alias for AssignUnsignedRightShiftExpr. */ +deprecated class AssignURShiftExpr = AssignUnsignedRightShiftExpr; + /** A common super-class to represent constant literals. */ class Literal extends Expr, @literal { /** @@ -904,26 +913,35 @@ class SubExpr extends BinaryExpr, @subexpr { } /** A binary expression using the `<<` operator. */ -class LShiftExpr extends BinaryExpr, @lshiftexpr { +class LeftShiftExpr extends BinaryExpr, @lshiftexpr { override string getOp() { result = " << " } - override string getAPrimaryQlClass() { result = "LShiftExpr" } + override string getAPrimaryQlClass() { result = "LeftShiftExpr" } } +/** DEPRECATED: Alias for LeftShiftExpr. */ +deprecated class LShiftExpr = LeftShiftExpr; + /** A binary expression using the `>>` operator. */ -class RShiftExpr extends BinaryExpr, @rshiftexpr { +class RightShiftExpr extends BinaryExpr, @rshiftexpr { override string getOp() { result = " >> " } - override string getAPrimaryQlClass() { result = "RShiftExpr" } + override string getAPrimaryQlClass() { result = "RightShiftExpr" } } +/** DEPRECATED: Alias for RightShiftExpr. */ +deprecated class RShiftExpr = RightShiftExpr; + /** A binary expression using the `>>>` operator. */ -class URShiftExpr extends BinaryExpr, @urshiftexpr { +class UnsignedRightShiftExpr extends BinaryExpr, @urshiftexpr { override string getOp() { result = " >>> " } - override string getAPrimaryQlClass() { result = "URShiftExpr" } + override string getAPrimaryQlClass() { result = "UnsignedRightShiftExpr" } } +/** DEPRECATED: Alias for UnsignedRightShiftExpr. */ +deprecated class URShiftExpr = UnsignedRightShiftExpr; + /** A binary expression using the `&` operator. */ class AndBitwiseExpr extends BinaryExpr, @andbitexpr { override string getOp() { result = " & " } diff --git a/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll b/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll index 4970b8ff642..e10cd0db708 100644 --- a/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll +++ b/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll @@ -298,3 +298,16 @@ class OnActivityResultIntentSource extends OnActivityResultIncomingIntent, Remot override string getSourceType() { result = "Android onActivityResult incoming Intent" } } + +/** + * A parameter of a method annotated with the `android.webkit.JavascriptInterface` annotation. + */ +class AndroidJavascriptInterfaceMethodParameter extends RemoteFlowSource { + AndroidJavascriptInterfaceMethodParameter() { + exists(JavascriptInterfaceMethod m | this.asParameter() = m.getAParameter()) + } + + override string getSourceType() { + result = "Parameter of method with JavascriptInterface annotation" + } +} diff --git a/java/ql/lib/semmle/code/java/dataflow/ModulusAnalysis.qll b/java/ql/lib/semmle/code/java/dataflow/ModulusAnalysis.qll index b919d143a39..5b2a39ad6c9 100644 --- a/java/ql/lib/semmle/code/java/dataflow/ModulusAnalysis.qll +++ b/java/ql/lib/semmle/code/java/dataflow/ModulusAnalysis.qll @@ -105,7 +105,7 @@ private predicate evenlyDivisibleExpr(Expr e, int factor) { exists(ConstantIntegerExpr c, int k | k = c.getIntValue() | e.(MulExpr).getAnOperand() = c and factor = k.abs() and factor >= 2 or - e.(LShiftExpr).getRhs() = c and factor = 2.pow(k) and k > 0 + e.(LeftShiftExpr).getRhs() = c and factor = 2.pow(k) and k > 0 or e.(BitwiseAndExpr).getAnOperand() = c and factor = max(int f | andmaskFactor(k, f)) ) diff --git a/java/ql/lib/semmle/code/java/dataflow/RangeAnalysis.qll b/java/ql/lib/semmle/code/java/dataflow/RangeAnalysis.qll index 835c4a20ac3..aeb79ee99e1 100644 --- a/java/ql/lib/semmle/code/java/dataflow/RangeAnalysis.qll +++ b/java/ql/lib/semmle/code/java/dataflow/RangeAnalysis.qll @@ -528,11 +528,11 @@ private predicate boundFlowStepMul(Expr e2, Expr e1, int factor) { or exists(AssignMulExpr e | e = e2 and e.getDest() = c and e.getRhs() = e1 and factor = k) or - exists(LShiftExpr e | + exists(LeftShiftExpr e | e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = 2.pow(k) ) or - exists(AssignLShiftExpr e | + exists(AssignLeftShiftExpr e | e = e2 and e.getDest() = e1 and e.getRhs() = c and factor = 2.pow(k) ) ) @@ -552,19 +552,19 @@ private predicate boundFlowStepDiv(Expr e2, Expr e1, int factor) { or exists(AssignDivExpr e | e = e2 and e.getDest() = e1 and e.getRhs() = c and factor = k) or - exists(RShiftExpr e | + exists(RightShiftExpr e | e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = 2.pow(k) ) or - exists(AssignRShiftExpr e | + exists(AssignRightShiftExpr e | e = e2 and e.getDest() = e1 and e.getRhs() = c and factor = 2.pow(k) ) or - exists(URShiftExpr e | + exists(UnsignedRightShiftExpr e | e = e2 and e.getLeftOperand() = e1 and e.getRightOperand() = c and factor = 2.pow(k) ) or - exists(AssignURShiftExpr e | + exists(AssignUnsignedRightShiftExpr e | e = e2 and e.getDest() = e1 and e.getRhs() = c and factor = 2.pow(k) ) ) diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplConsistency.qll b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplConsistency.qll index 533899e8a85..9bbc70fbdf9 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplConsistency.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplConsistency.qll @@ -45,6 +45,16 @@ module Consistency { ) { none() } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodeAtPosition`. */ + predicate uniqueParameterNodeAtPositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } + + /** Holds if `(c, pos, p)` should be excluded from the consistency test `uniqueParameterNodePosition`. */ + predicate uniqueParameterNodePositionExclude(DataFlowCallable c, ParameterPosition pos, Node p) { + none() + } } private class RelevantNode extends Node { @@ -246,6 +256,7 @@ module Consistency { query predicate uniqueParameterNodeAtPosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodeAtPositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(Node p0 | isParameterNode(p0, c, pos))) and msg = "Parameters with overlapping positions." @@ -254,6 +265,7 @@ module Consistency { query predicate uniqueParameterNodePosition( DataFlowCallable c, ParameterPosition pos, Node p, string msg ) { + not any(ConsistencyConfiguration conf).uniqueParameterNodePositionExclude(c, pos, p) and isParameterNode(p, c, pos) and not exists(unique(ParameterPosition pos0 | isParameterNode(p, c, pos0))) and msg = "Parameter node with multiple positions." diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImpl.qll b/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImpl.qll index d722aa68b70..85ffeb62e5f 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImpl.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImpl.qll @@ -39,6 +39,11 @@ module Public { ) or exists(ReturnKind rk | this = TReturnSummaryComponent(rk) and result = "return (" + rk + ")") + or + exists(SummaryComponent::SyntheticGlobal sg | + this = TSyntheticGlobalSummaryComponent(sg) and + result = "synthetic global (" + sg + ")" + ) } } @@ -159,24 +164,24 @@ module Public { SummaryComponentStack return(ReturnKind rk) { result = singleton(SummaryComponent::return(rk)) } } - private predicate noComponentSpecificCsv(SummaryComponent sc) { - not exists(getComponentSpecificCsv(sc)) + private predicate noComponentSpecific(SummaryComponent sc) { + not exists(getComponentSpecific(sc)) } /** Gets a textual representation of this component used for flow summaries. */ - private string getComponentCsv(SummaryComponent sc) { - result = getComponentSpecificCsv(sc) + private string getComponent(SummaryComponent sc) { + result = getComponentSpecific(sc) or - noComponentSpecificCsv(sc) and + noComponentSpecific(sc) and ( exists(ArgumentPosition pos | sc = TParameterSummaryComponent(pos) and - result = "Parameter[" + getArgumentPositionCsv(pos) + "]" + result = "Parameter[" + getArgumentPosition(pos) + "]" ) or exists(ParameterPosition pos | sc = TArgumentSummaryComponent(pos) and - result = "Argument[" + getParameterPositionCsv(pos) + "]" + result = "Argument[" + getParameterPosition(pos) + "]" ) or sc = TReturnSummaryComponent(getReturnValueKind()) and result = "ReturnValue" @@ -184,16 +189,16 @@ module Public { } /** Gets a textual representation of this stack used for flow summaries. */ - string getComponentStackCsv(SummaryComponentStack stack) { + string getComponentStack(SummaryComponentStack stack) { exists(SummaryComponent head, SummaryComponentStack tail | head = stack.head() and tail = stack.tail() and - result = getComponentStackCsv(tail) + "." + getComponentCsv(head) + result = getComponentStack(tail) + "." + getComponent(head) ) or exists(SummaryComponent c | stack = TSingletonSummaryComponentStack(c) and - result = getComponentCsv(c) + result = getComponent(c) ) } @@ -241,15 +246,19 @@ module Public { } /** - * Holds if the summary is auto generated and not manually generated. + * Holds if all the summaries that apply to `this` are auto generated and not manually created. */ - predicate isAutoGenerated() { none() } + final predicate isAutoGenerated() { this.hasProvenance("generated") and not this.isManual() } /** - * Holds if the summary has the given provenance where `true` is - * `generated` and `false` is `manual`. + * Holds if there exists a manual summary that applies to `this`. */ - predicate hasProvenance(boolean generated) { none() } + final predicate isManual() { this.hasProvenance("manual") } + + /** + * Holds if there exists a summary that applies to `this` that has provenance `provenance`. + */ + predicate hasProvenance(string provenance) { none() } } /** A callable where there is no flow via the callable. */ @@ -257,15 +266,19 @@ module Public { NeutralCallable() { neutralElement(this, _) } /** - * Holds if the neutral is auto generated. + * Holds if the neutral is auto generated. */ - predicate isAutoGenerated() { neutralElement(this, true) } + predicate isAutoGenerated() { neutralElement(this, "generated") } /** - * Holds if the neutral has the given provenance where `true` is - * `generated` and `false` is `manual`. + * Holds if there exists a manual neutral that applies to `this`. */ - predicate hasProvenance(boolean generated) { neutralElement(this, generated) } + final predicate isManual() { this.hasProvenance("manual") } + + /** + * Holds if the neutral has provenance `provenance`. + */ + predicate hasProvenance(string provenance) { neutralElement(this, provenance) } } } @@ -997,12 +1010,12 @@ module Private { private predicate relevantSummaryElementGenerated( AccessPath inSpec, AccessPath outSpec, string kind ) { - summaryElement(this, inSpec, outSpec, kind, true) and - not summaryElement(this, _, _, _, false) + summaryElement(this, inSpec, outSpec, kind, "generated") and + not summaryElement(this, _, _, _, "manual") } private predicate relevantSummaryElement(AccessPath inSpec, AccessPath outSpec, string kind) { - summaryElement(this, inSpec, outSpec, kind, false) + summaryElement(this, inSpec, outSpec, kind, "manual") or this.relevantSummaryElementGenerated(inSpec, outSpec, kind) } @@ -1021,10 +1034,8 @@ module Private { ) } - override predicate isAutoGenerated() { this.relevantSummaryElementGenerated(_, _, _) } - - override predicate hasProvenance(boolean generated) { - summaryElement(this, _, _, _, generated) + override predicate hasProvenance(string provenance) { + summaryElement(this, _, _, _, provenance) } } @@ -1211,8 +1222,8 @@ module Private { c.relevantSummary(input, output, preservesValue) and csv = c.getCallableCsv() // Callable information - + getComponentStackCsv(input) + ";" // input - + getComponentStackCsv(output) + ";" // output + + getComponentStack(input) + ";" // input + + getComponentStack(output) + ";" // output + renderKind(preservesValue) + ";" // kind + renderProvenance(c) // provenance ) diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImplSpecific.qll b/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImplSpecific.qll index 883b791835b..1f96cef8cc1 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImplSpecific.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImplSpecific.qll @@ -66,13 +66,6 @@ DataFlowType getSyntheticGlobalType(SummaryComponent::SyntheticGlobal sg) { result instanceof TypeObject } -bindingset[provenance] -private boolean isGenerated(string provenance) { - provenance = "generated" and result = true - or - provenance != "generated" and result = false -} - private predicate relatedArgSpec(Callable c, string spec) { exists( string namespace, string type, boolean subtypes, string name, string signature, string ext @@ -138,19 +131,17 @@ private predicate correspondingKotlinParameterDefaultsArgSpec( /** * Holds if an external flow summary exists for `c` with input specification - * `input`, output specification `output`, kind `kind`, and a flag `generated` - * stating whether the summary is autogenerated. + * `input`, output specification `output`, kind `kind`, and provenance `provenance`. */ predicate summaryElement( - SummarizedCallableBase c, string input, string output, string kind, boolean generated + SummarizedCallableBase c, string input, string output, string kind, string provenance ) { exists( string namespace, string type, boolean subtypes, string name, string signature, string ext, - string provenance, string originalInput, string originalOutput, Callable baseCallable + string originalInput, string originalOutput, Callable baseCallable | summaryModel(namespace, type, subtypes, name, signature, ext, originalInput, originalOutput, kind, provenance) and - generated = isGenerated(provenance) and baseCallable = interpretElement(namespace, type, subtypes, name, signature, ext) and ( c.asCallable() = baseCallable and input = originalInput and output = originalOutput @@ -163,13 +154,12 @@ predicate summaryElement( } /** - * Holds if a neutral model exists for `c`, which means that there is no - * flow through `c`. The flag `generated` states whether the model is autogenerated. + * Holds if a neutral model exists for `c` with provenance `provenance`, + * which means that there is no flow through `c`. */ -predicate neutralElement(SummarizedCallableBase c, boolean generated) { - exists(string namespace, string type, string name, string signature, string provenance | +predicate neutralElement(SummarizedCallableBase c, string provenance) { + exists(string namespace, string type, string name, string signature | neutralModel(namespace, type, name, signature, provenance) and - generated = isGenerated(provenance) and c.asCallable() = interpretElement(namespace, type, false, name, signature, "") ) } @@ -181,7 +171,7 @@ SummaryComponent interpretComponentSpecific(AccessPathToken c) { } /** Gets the summary component for specification component `c`, if any. */ -private string getContentSpecificCsv(Content c) { +private string getContentSpecific(Content c) { exists(Field f, string package, string className, string fieldName | f = c.(FieldContent).getField() and f.hasQualifiedName(package, className, fieldName) and @@ -202,15 +192,15 @@ private string getContentSpecificCsv(Content c) { } /** Gets the textual representation of the content in the format used for flow summaries. */ -string getComponentSpecificCsv(SummaryComponent sc) { - exists(Content c | sc = TContentSummaryComponent(c) and result = getContentSpecificCsv(c)) +string getComponentSpecific(SummaryComponent sc) { + exists(Content c | sc = TContentSummaryComponent(c) and result = getContentSpecific(c)) } /** Gets the textual representation of a parameter position in the format used for flow summaries. */ -string getParameterPositionCsv(ParameterPosition pos) { result = pos.toString() } +string getParameterPosition(ParameterPosition pos) { result = pos.toString() } /** Gets the textual representation of an argument position in the format used for flow summaries. */ -string getArgumentPositionCsv(ArgumentPosition pos) { result = pos.toString() } +string getArgumentPosition(ArgumentPosition pos) { result = pos.toString() } /** Holds if input specification component `c` needs a reference. */ predicate inputNeedsReferenceSpecific(string c) { none() } @@ -222,16 +212,14 @@ class SourceOrSinkElement = Top; /** * Holds if an external source specification exists for `e` with output specification - * `output`, kind `kind`, and a flag `generated` stating whether the source specification is - * autogenerated. + * `output`, kind `kind`, and provenance `provenance`. */ -predicate sourceElement(SourceOrSinkElement e, string output, string kind, boolean generated) { +predicate sourceElement(SourceOrSinkElement e, string output, string kind, string provenance) { exists( string namespace, string type, boolean subtypes, string name, string signature, string ext, - string provenance, SourceOrSinkElement baseSource, string originalOutput + SourceOrSinkElement baseSource, string originalOutput | sourceModel(namespace, type, subtypes, name, signature, ext, originalOutput, kind, provenance) and - generated = isGenerated(provenance) and baseSource = interpretElement(namespace, type, subtypes, name, signature, ext) and ( e = baseSource and output = originalOutput @@ -243,16 +231,14 @@ predicate sourceElement(SourceOrSinkElement e, string output, string kind, boole /** * Holds if an external sink specification exists for `e` with input specification - * `input`, kind `kind` and a flag `generated` stating whether the sink specification is - * autogenerated. + * `input`, kind `kind` and provenance `provenance`. */ -predicate sinkElement(SourceOrSinkElement e, string input, string kind, boolean generated) { +predicate sinkElement(SourceOrSinkElement e, string input, string kind, string provenance) { exists( string namespace, string type, boolean subtypes, string name, string signature, string ext, - string provenance, SourceOrSinkElement baseSink, string originalInput + SourceOrSinkElement baseSink, string originalInput | sinkModel(namespace, type, subtypes, name, signature, ext, originalInput, kind, provenance) and - generated = isGenerated(provenance) and baseSink = interpretElement(namespace, type, subtypes, name, signature, ext) and ( e = baseSink and originalInput = input diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll b/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll index c5d5bc98009..7e13861c0da 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll @@ -72,13 +72,13 @@ module Private { } /** A left shift or an assign-lshift expression. */ - class LShiftExpr extends J::Expr { - LShiftExpr() { this instanceof J::LShiftExpr or this instanceof J::AssignLShiftExpr } + class LeftShiftExpr extends J::Expr { + LeftShiftExpr() { this instanceof J::LeftShiftExpr or this instanceof J::AssignLeftShiftExpr } /** Gets the RHS operand of this shift. */ Expr getRhs() { - result = this.(J::LShiftExpr).getRightOperand() or - result = this.(J::AssignLShiftExpr).getRhs() + result = this.(J::LeftShiftExpr).getRightOperand() or + result = this.(J::AssignLeftShiftExpr).getRhs() } } diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/Sign.qll b/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/Sign.qll index b2058a27114..649b4216996 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/Sign.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/Sign.qll @@ -18,9 +18,9 @@ newtype TBinarySignOperation = TBitAndOp() or TBitOrOp() or TBitXorOp() or - TLShiftOp() or - TRShiftOp() or - TURShiftOp() + TLeftShiftOp() or + TRightShiftOp() or + TUnsignedRightShiftOp() /** Class representing expression signs (+, -, 0). */ class Sign extends TSign { @@ -271,10 +271,10 @@ class Sign extends TSign { or op = TBitXorOp() and result = bitxor(s) or - op = TLShiftOp() and result = lshift(s) + op = TLeftShiftOp() and result = lshift(s) or - op = TRShiftOp() and result = rshift(s) + op = TRightShiftOp() and result = rshift(s) or - op = TURShiftOp() and result = urshift(s) + op = TUnsignedRightShiftOp() and result = urshift(s) } } diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll b/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll index b2b63ff3633..59f7f4580a8 100644 --- a/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll +++ b/java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll @@ -102,12 +102,12 @@ module Private { this instanceof J::AssignOrExpr or this instanceof J::XorBitwiseExpr or this instanceof J::AssignXorExpr or - this instanceof J::LShiftExpr or - this instanceof J::AssignLShiftExpr or - this instanceof J::RShiftExpr or - this instanceof J::AssignRShiftExpr or - this instanceof J::URShiftExpr or - this instanceof J::AssignURShiftExpr + this instanceof J::LeftShiftExpr or + this instanceof J::AssignLeftShiftExpr or + this instanceof J::RightShiftExpr or + this instanceof J::AssignRightShiftExpr or + this instanceof J::UnsignedRightShiftExpr or + this instanceof J::AssignUnsignedRightShiftExpr } /** Returns the operation representing this expression. */ @@ -144,17 +144,17 @@ module Private { or this instanceof J::AssignXorExpr and result = TBitXorOp() or - this instanceof J::LShiftExpr and result = TLShiftOp() + this instanceof J::LeftShiftExpr and result = TLeftShiftOp() or - this instanceof J::AssignLShiftExpr and result = TLShiftOp() + this instanceof J::AssignLeftShiftExpr and result = TLeftShiftOp() or - this instanceof J::RShiftExpr and result = TRShiftOp() + this instanceof J::RightShiftExpr and result = TRightShiftOp() or - this instanceof J::AssignRShiftExpr and result = TRShiftOp() + this instanceof J::AssignRightShiftExpr and result = TRightShiftOp() or - this instanceof J::URShiftExpr and result = TURShiftOp() + this instanceof J::UnsignedRightShiftExpr and result = TUnsignedRightShiftOp() or - this instanceof J::AssignURShiftExpr and result = TURShiftOp() + this instanceof J::AssignUnsignedRightShiftExpr and result = TUnsignedRightShiftOp() } Expr getLeftOperand() { diff --git a/java/ql/lib/semmle/code/java/frameworks/android/WebView.qll b/java/ql/lib/semmle/code/java/frameworks/android/WebView.qll index dadcef4158e..78eeae4bdf2 100644 --- a/java/ql/lib/semmle/code/java/frameworks/android/WebView.qll +++ b/java/ql/lib/semmle/code/java/frameworks/android/WebView.qll @@ -78,6 +78,14 @@ class WebViewSetWebViewClientMethod extends Method { } } +/** The method `setAllowContentAccess` of the class `android.webkit.WebSettings` */ +class AllowContentAccessMethod extends Method { + AllowContentAccessMethod() { + this.getDeclaringType() instanceof TypeWebSettings and + this.hasName("setAllowContentAccess") + } +} + /** The method `shouldOverrideUrlLoading` of the class `android.webkit.WebViewClient`. */ class ShouldOverrideUrlLoading extends Method { ShouldOverrideUrlLoading() { @@ -85,3 +93,10 @@ class ShouldOverrideUrlLoading extends Method { this.hasName("shouldOverrideUrlLoading") } } + +/** + * A method annotated with the `android.webkit.JavascriptInterface` annotation. + */ +class JavascriptInterfaceMethod extends Method { + JavascriptInterfaceMethod() { this.hasAnnotation("android.webkit", "JavascriptInterface") } +} diff --git a/java/ql/lib/semmle/code/java/security/ConditionalBypassQuery.qll b/java/ql/lib/semmle/code/java/security/ConditionalBypassQuery.qll index 3bff0ae0a80..9bff32eac02 100644 --- a/java/ql/lib/semmle/code/java/security/ConditionalBypassQuery.qll +++ b/java/ql/lib/semmle/code/java/security/ConditionalBypassQuery.qll @@ -23,6 +23,19 @@ predicate conditionControlsMethod(MethodAccess ma, Expr e) { ) } +/** + * Holds if `node1` to `node2` is a dataflow step through the + * `endsWith` method of the `java.lang.String` class. + */ +private predicate endsWithStep(DataFlow::Node node1, DataFlow::Node node2) { + exists(MethodAccess ma | + ma.getMethod().getDeclaringType() instanceof TypeString and + ma.getMethod().getName() = "endsWith" and + ma.getQualifier() = node1.asExpr() and + ma = node2.asExpr() + ) +} + /** * A taint tracking configuration for untrusted data flowing to sensitive conditions. */ @@ -32,4 +45,8 @@ class ConditionalBypassFlowConfig extends TaintTracking::Configuration { override predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource } override predicate isSink(DataFlow::Node sink) { conditionControlsMethod(_, sink.asExpr()) } + + override predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) { + endsWithStep(node1, node2) + } } diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index 81754a9e440..60c7269a528 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,13 @@ +## 0.5.1 + +### New Queries + +* Added a new query `java/android/websettings-allow-content-access` to detect Android WebViews which do not disable access to `content://` urls. + +### Minor Analysis Improvements + +* The name, description and alert message for the query `java/concatenated-sql-query` have been altered to emphasize that the query flags the use of string concatenation to construct SQL queries, not the lack of appropriate escaping. The query's files have been renamed from `SqlUnescaped.ql` and `SqlUnescapedLib.qll` to `SqlConcatenated.ql` and `SqlConcatenatedLib.qll` respectively; in the unlikely event your custom configuration or queries refer to either of these files by name, those references will need to be adjusted. The query id remains `java/concatenated-sql-query`, so alerts should not be re-raised as a result of this change. + ## 0.5.0 ### New Queries diff --git a/java/ql/src/Likely Bugs/Arithmetic/LShiftLargerThanTypeWidth.ql b/java/ql/src/Likely Bugs/Arithmetic/LShiftLargerThanTypeWidth.ql index 92bec98fd5e..f3c0b220080 100644 --- a/java/ql/src/Likely Bugs/Arithmetic/LShiftLargerThanTypeWidth.ql +++ b/java/ql/src/Likely Bugs/Arithmetic/LShiftLargerThanTypeWidth.ql @@ -14,7 +14,7 @@ int integralTypeWidth(IntegralType t) { if t.hasName("long") or t.hasName("Long") then result = 64 else result = 32 } -from LShiftExpr shift, IntegralType t, int v, string typname, int width +from LeftShiftExpr shift, IntegralType t, int v, string typname, int width where shift.getLeftOperand().getType() = t and shift.getRightOperand().(CompileTimeConstantExpr).getIntValue() = v and diff --git a/java/ql/src/Likely Bugs/Arithmetic/WhitespaceContradictsPrecedence.ql b/java/ql/src/Likely Bugs/Arithmetic/WhitespaceContradictsPrecedence.ql index db806ef760c..b0508b8eb38 100644 --- a/java/ql/src/Likely Bugs/Arithmetic/WhitespaceContradictsPrecedence.ql +++ b/java/ql/src/Likely Bugs/Arithmetic/WhitespaceContradictsPrecedence.ql @@ -33,9 +33,9 @@ class ArithmeticExpr extends BinaryExpr { */ class ShiftExpr extends BinaryExpr { ShiftExpr() { - this instanceof LShiftExpr or - this instanceof RShiftExpr or - this instanceof URShiftExpr + this instanceof LeftShiftExpr or + this instanceof RightShiftExpr or + this instanceof UnsignedRightShiftExpr } } diff --git a/java/ql/src/Likely Bugs/Comparison/UselessComparisonTest.ql b/java/ql/src/Likely Bugs/Comparison/UselessComparisonTest.ql index 964a5a6060a..b4076bee00b 100644 --- a/java/ql/src/Likely Bugs/Comparison/UselessComparisonTest.ql +++ b/java/ql/src/Likely Bugs/Comparison/UselessComparisonTest.ql @@ -99,7 +99,7 @@ Expr overFlowCand() { | bin instanceof AddExpr or bin instanceof MulExpr or - bin instanceof LShiftExpr + bin instanceof LeftShiftExpr ) or exists(AssignOp op | @@ -109,7 +109,7 @@ Expr overFlowCand() { | op instanceof AssignAddExpr or op instanceof AssignMulExpr or - op instanceof AssignLShiftExpr + op instanceof AssignLeftShiftExpr ) or exists(AddExpr add, CompileTimeConstantExpr c | diff --git a/java/ql/src/Metrics/Summaries/GeneratedVsManualCoverage.ql b/java/ql/src/Metrics/Summaries/GeneratedVsManualCoverage.ql index eb03a785702..a37f2c005ac 100644 --- a/java/ql/src/Metrics/Summaries/GeneratedVsManualCoverage.ql +++ b/java/ql/src/Metrics/Summaries/GeneratedVsManualCoverage.ql @@ -26,15 +26,16 @@ private int getNumMadModeledApis(string package, string provenance) { sc.isAutoGenerated() and provenance = "generated" or - // "manual-only" - sc.hasProvenance(false) and - not sc.hasProvenance(true) and - provenance = "manual" - or - // "both" - sc.hasProvenance(false) and - sc.hasProvenance(true) and - provenance = "both" + sc.isManual() and + ( + if sc.hasProvenance("generated") + then + // "both" + provenance = "both" + else + // "manual-only" + provenance = "manual" + ) ) ) } diff --git a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java index a36a7dccb8a..baf4ef8545e 100644 --- a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java +++ b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java @@ -1,6 +1,6 @@ public class PartialPathTraversalGood { public void example(File dir, File parent) throws IOException { - if (!dir.getCanonicalPath().toPath().startsWith(parent.getCanonicalPath().toPath())) { + if (!dir.getCanonicalPath().startsWith(parent.getCanonicalPath() + File.separator)) { throw new IOException("Invalid directory: " + dir.getCanonicalPath()); } } diff --git a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp index a20663dd162..7703f5c52ff 100644 --- a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp +++ b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp @@ -27,7 +27,7 @@ and not just children of parent, which is a security issue.

In this example, the if statement checks if parent.getCanonicalPath() + File.separator -is a prefix of dir.getCanonicalPath(). Because parent.getCanonicalPath().toPath() is +is a prefix of dir.getCanonicalPath(). Because parent.getCanonicalPath() + File.separator is indeed slash-terminated, the user supplying dir can only access children of parent, as desired. diff --git a/java/ql/src/Security/CWE/CWE-190/ArithmeticCommon.qll b/java/ql/src/Security/CWE/CWE-190/ArithmeticCommon.qll index 8287ebc869e..122f6b75b4a 100644 --- a/java/ql/src/Security/CWE/CWE-190/ArithmeticCommon.qll +++ b/java/ql/src/Security/CWE/CWE-190/ArithmeticCommon.qll @@ -153,9 +153,9 @@ predicate upcastToWiderType(Expr e) { /** Holds if the result of `exp` has certain bits filtered by a bitwise and. */ private predicate inBitwiseAnd(Expr exp) { exists(AndBitwiseExpr a | a.getAnOperand() = exp) or - inBitwiseAnd(exp.(LShiftExpr).getAnOperand()) or - inBitwiseAnd(exp.(RShiftExpr).getAnOperand()) or - inBitwiseAnd(exp.(URShiftExpr).getAnOperand()) + inBitwiseAnd(exp.(LeftShiftExpr).getAnOperand()) or + inBitwiseAnd(exp.(RightShiftExpr).getAnOperand()) or + inBitwiseAnd(exp.(UnsignedRightShiftExpr).getAnOperand()) } /** Holds if overflow/underflow is irrelevant for this expression. */ diff --git a/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.qhelp b/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.qhelp new file mode 100644 index 00000000000..13439bf585d --- /dev/null +++ b/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.qhelp @@ -0,0 +1,38 @@ + + + +

Android can provide access to content providers within a WebView using + the setAllowContentAccess setting.

+ +

Allowing access to content providers via content:// URLs + may allow JavaScript to access protected content.

+ + + +

+ If your app does not require access to the content:// URL + functionality, you should explicitly disable the setting by + calling setAllowContentAccess(false) on the settings of the + WebView. +

+
+ + +

In the following (bad) example, access to content:// URLs is explicitly allowed.

+ + + +

In the following (good) example, access to content:// URLs is explicitly denied.

+ + +
+ + +
  • + Android Documentation: setAllowContentAccess. +
  • +
    + + diff --git a/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.ql b/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.ql new file mode 100644 index 00000000000..d1f4f33917a --- /dev/null +++ b/java/ql/src/Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.ql @@ -0,0 +1,112 @@ +/** + * @name Android WebView settings allows access to content links + * @id java/android/websettings-allow-content-access + * @description Access to content providers in a WebView can allow access to protected information by loading content:// links. + * @kind problem + * @problem.severity warning + * @precision medium + * @security-severity 6.5 + * @tags security + * external/cwe/cwe-200 + */ + +import java +import semmle.code.java.dataflow.TaintTracking +import semmle.code.java.frameworks.android.WebView + +/** Represents `android.webkit.WebView` and its subclasses. */ +private class TypeWebViewOrSubclass extends RefType { + TypeWebViewOrSubclass() { this.getASupertype*() instanceof TypeWebView } +} + +/** + * A method access to a getter method which is private. + * + * In Kotlin, member accesses are translated to getter methods. + */ +private class PrivateGetterMethodAccess extends MethodAccess { + PrivateGetterMethodAccess() { + this.getMethod() instanceof GetterMethod and + this.getMethod().isPrivate() + } +} + +/** A source for `android.webkit.WebView` objects. */ +class WebViewSource extends DataFlow::Node { + WebViewSource() { + this.getType() instanceof TypeWebViewOrSubclass and + // To reduce duplicate results, we only consider WebView objects from + // constructor and method calls, or method accesses which are cast to WebView. + ( + this.asExpr() instanceof ClassInstanceExpr or + this.asExpr() instanceof MethodAccess or + this.asExpr().(CastExpr).getAChildExpr() instanceof MethodAccess + ) and + // Avoid duplicate results from Kotlin member accesses. + not this.asExpr() instanceof PrivateGetterMethodAccess + } +} + +/** + * A sink representing a call to `android.webkit.WebSettings.setAllowContentAccess` that + * disables content access. + */ +class WebSettingsDisallowContentAccessSink extends DataFlow::Node { + WebSettingsDisallowContentAccessSink() { + exists(MethodAccess ma | + ma.getQualifier() = this.asExpr() and + ma.getMethod() instanceof AllowContentAccessMethod and + ma.getArgument(0).(CompileTimeConstantExpr).getBooleanValue() = false + ) + } +} + +class WebViewDisallowContentAccessConfiguration extends TaintTracking::Configuration { + WebViewDisallowContentAccessConfiguration() { this = "WebViewDisallowContentAccessConfiguration" } + + override predicate isSource(DataFlow::Node node) { node instanceof WebViewSource } + + /** + * Holds if the step from `node1` to `node2` is a dataflow step that gets the `WebSettings` object + * from the `getSettings` method of a `WebView` object. + * + * This step is only valid when `state1` is empty and `state2` indicates that the `WebSettings` object + * has been accessed. + */ + override predicate isAdditionalTaintStep( + DataFlow::Node node1, DataFlow::FlowState state1, DataFlow::Node node2, + DataFlow::FlowState state2 + ) { + state1 instanceof DataFlow::FlowStateEmpty and + state2 = "WebSettings" and + // settings = webView.getSettings() + // ^node2 = ^node1 + exists(MethodAccess ma | + ma = node2.asExpr() and + ma.getQualifier() = node1.asExpr() and + ma.getMethod() instanceof WebViewGetSettingsMethod + ) + } + + override predicate isSink(DataFlow::Node node, DataFlow::FlowState state) { + state = "WebSettings" and + node instanceof WebSettingsDisallowContentAccessSink + } +} + +from Expr e +where + // explicit: setAllowContentAccess(true) + exists(MethodAccess ma | + ma = e and + ma.getMethod() instanceof AllowContentAccessMethod and + ma.getArgument(0).(CompileTimeConstantExpr).getBooleanValue() = true + ) + or + // implicit: no setAllowContentAccess(false) + exists(WebViewSource source | + source.asExpr() = e and + not any(WebViewDisallowContentAccessConfiguration cfg).hasFlow(source, _) + ) +select e, + "Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView." diff --git a/java/ql/src/Security/CWE/CWE-200/ContentAccessDisabled.java b/java/ql/src/Security/CWE/CWE-200/ContentAccessDisabled.java new file mode 100644 index 00000000000..25214a69afe --- /dev/null +++ b/java/ql/src/Security/CWE/CWE-200/ContentAccessDisabled.java @@ -0,0 +1,3 @@ +WebSettings settings = webview.getSettings(); + +settings.setAllowContentAccess(false); diff --git a/java/ql/src/Security/CWE/CWE-200/ContentAccessEnabled.java b/java/ql/src/Security/CWE/CWE-200/ContentAccessEnabled.java new file mode 100644 index 00000000000..3e5e6cb466b --- /dev/null +++ b/java/ql/src/Security/CWE/CWE-200/ContentAccessEnabled.java @@ -0,0 +1,3 @@ +WebSettings settings = webview.getSettings(); + +settings.setAllowContentAccess(true); diff --git a/java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.java b/java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.java index 7d8299f2369..6a66258747f 100644 --- a/java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.java +++ b/java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.java @@ -7,6 +7,6 @@ byte[] encrypted = cipher.doFinal(input.getBytes("UTF-8")); // ... // GOOD: AES is a strong algorithm -Cipher des = Cipher.getInstance("AES"); +Cipher aes = Cipher.getInstance("AES"); -// ... \ No newline at end of file +// ... diff --git a/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.qhelp b/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.qhelp index d1933ad4ac2..6806527e442 100644 --- a/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.qhelp +++ b/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.qhelp @@ -28,11 +28,52 @@ for example JSON or XML. However, these formats should not be deserialized into complex objects because this provides further opportunities for attack. For example, XML-based deserialization attacks are possible through libraries such as XStream and XmlDecoder. - +

    +

    Alternatively, a tightly controlled whitelist can limit the vulnerability of code, but be aware of the existence of so-called Bypass Gadgets, which can circumvent such protection measures.

    +

    +Recommendations specific to particular frameworks supported by this query: +

    +

    FastJson - com.alibaba:fastjson

    +
      +
    • Secure by Default: Partially
    • +
    • Recommendation: Call com.alibaba.fastjson.parser.ParserConfig#setSafeMode with the argument true before deserializing untrusted data.
    • +
    +

    +

    FasterXML - com.fasterxml.jackson.core:jackson-databind

    +
      +
    • Secure by Default: Yes
    • +
    • Recommendation: Don't call com.fasterxml.jackson.databind.ObjectMapper#enableDefaultTyping and don't annotate any object fields with com.fasterxml.jackson.annotation.JsonTypeInfo passing either the CLASS or MINIMAL_CLASS values to the annotation. + Read this guide.
    • +
    +

    +

    Kryo - com.esotericsoftware:kryo and com.esotericsoftware:kryo5

    +
      +
    • Secure by Default: Yes for com.esotericsoftware:kryo5 and for com.esotericsoftware:kryo >= v5.0.0
    • +
    • Recommendation: Don't call com.esotericsoftware.kryo(5).Kryo#setRegistrationRequired with the argument false on any Kryo instance that may deserialize untrusted data.
    • +
    +

    +

    ObjectInputStream - Java Standard Library

    +
      +
    • Secure by Default: No
    • +
    • Recommendation: Use a validating input stream, such as org.apache.commons.io.serialization.ValidatingObjectInputStream.
    • +
    +

    +

    SnakeYAML - org.yaml:snakeyaml

    +
      +
    • Secure by Default: No
    • +
    • Recommendation: Pass an instance of org.yaml.snakeyaml.constructor.SafeConstructor to org.yaml.snakeyaml.Yaml's constructor before using it to deserialize untrusted data.
    • +
    +

    +

    XML Decoder - Standard Java Library

    +
      +
    • Secure by Default: No
    • +
    • Recommendation: Do not use with untrusted user input.
    • +
    +

    @@ -74,7 +115,7 @@ Alvaro Muñoz & Christian Schneider, RSAConference 2016:
  • SnakeYaml documentation on deserialization: -SnakeYaml deserialization. +SnakeYaml deserialization.
  • Hessian deserialization and related gadget chains: diff --git a/java/ql/src/Security/CWE/CWE-681/NumericCastCommon.qll b/java/ql/src/Security/CWE/CWE-681/NumericCastCommon.qll index 4dec14a204f..5a77c0a8d6e 100644 --- a/java/ql/src/Security/CWE/CWE-681/NumericCastCommon.qll +++ b/java/ql/src/Security/CWE/CWE-681/NumericCastCommon.qll @@ -16,10 +16,10 @@ class NumericNarrowingCastExpr extends CastExpr { class RightShiftOp extends Expr { RightShiftOp() { - this instanceof RShiftExpr or - this instanceof URShiftExpr or - this instanceof AssignRShiftExpr or - this instanceof AssignURShiftExpr + this instanceof RightShiftExpr or + this instanceof UnsignedRightShiftExpr or + this instanceof AssignRightShiftExpr or + this instanceof AssignUnsignedRightShiftExpr } private Expr getLhs() { diff --git a/java/ql/src/Telemetry/ExternalApi.qll b/java/ql/src/Telemetry/ExternalApi.qll index 2f7ebcc9d19..38cb81f3d56 100644 --- a/java/ql/src/Telemetry/ExternalApi.qll +++ b/java/ql/src/Telemetry/ExternalApi.qll @@ -44,7 +44,7 @@ class ExternalApi extends Callable { ExternalApi() { not this.fromSource() and not isUninteresting(this) } /** - * Gets information about the external API in the form expected by the CSV modeling framework. + * Gets information about the external API in the form expected by the MaD modeling framework. */ string getApiName() { result = diff --git a/java/ql/src/change-notes/2023-01-03-renamed-sql-unescaped.md b/java/ql/src/change-notes/released/0.5.1.md similarity index 68% rename from java/ql/src/change-notes/2023-01-03-renamed-sql-unescaped.md rename to java/ql/src/change-notes/released/0.5.1.md index b414a485a50..0bd40140cc1 100644 --- a/java/ql/src/change-notes/2023-01-03-renamed-sql-unescaped.md +++ b/java/ql/src/change-notes/released/0.5.1.md @@ -1,4 +1,9 @@ ---- -category: minorAnalysis ---- -* The name, description and alert message for the query `java/concatenated-sql-query` have been altered to emphasise that the query flags the use of string concatenation to construct SQL queries, not the lack of appropriate escaping. The query's files have been renamed from `SqlUnescaped.ql` and `SqlUnescapedLib.qll` to `SqlConcatenated.ql` and `SqlConcatenatedLib.qll` respectively; in the unlikely event your custom configuration or queries refer to either of these files by name, those references will need to be adjusted. The query id remains `java/concatenated-sql-query`, so alerts should not be re-raised as a result of this change. +## 0.5.1 + +### New Queries + +* Added a new query `java/android/websettings-allow-content-access` to detect Android WebViews which do not disable access to `content://` urls. + +### Minor Analysis Improvements + +* The name, description and alert message for the query `java/concatenated-sql-query` have been altered to emphasize that the query flags the use of string concatenation to construct SQL queries, not the lack of appropriate escaping. The query's files have been renamed from `SqlUnescaped.ql` and `SqlUnescapedLib.qll` to `SqlConcatenated.ql` and `SqlConcatenatedLib.qll` respectively; in the unlikely event your custom configuration or queries refer to either of these files by name, those references will need to be adjusted. The query id remains `java/concatenated-sql-query`, so alerts should not be re-raised as a result of this change. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index 30e271c5361..0bf7024c337 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.5.1 diff --git a/java/ql/src/codeql-suites/java-security-experimental.qls b/java/ql/src/codeql-suites/java-security-experimental.qls new file mode 100644 index 00000000000..cb0b26d6444 --- /dev/null +++ b/java/ql/src/codeql-suites/java-security-experimental.qls @@ -0,0 +1,4 @@ +- description: Extended and experimental security queries for Java and Kotlin +- queries: . +- apply: security-experimental-selectors.yml + from: codeql/suite-helpers \ No newline at end of file diff --git a/java/ql/src/experimental/Security/CWE/CWE-016/InsecureSpringActuatorConfig.ql b/java/ql/src/experimental/Security/CWE/CWE-016/InsecureSpringActuatorConfig.ql index 698dae57b96..800fc6db564 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-016/InsecureSpringActuatorConfig.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-016/InsecureSpringActuatorConfig.ql @@ -7,6 +7,7 @@ * @precision high * @id java/insecure-spring-actuator-config * @tags security + * experimental * external/cwe/cwe-016 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.ql b/java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.ql index 85daa77cc56..b700e691550 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-016/SpringBootActuators.ql @@ -7,6 +7,7 @@ * @precision high * @id java/spring-boot-exposed-actuators * @tags security + * experimental * external/cwe/cwe-16 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql index 369833a4df2..d65e2110de1 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql @@ -8,6 +8,7 @@ * @precision high * @id java/log4j-injection * @tags security + * experimental * external/cwe/cwe-020 * external/cwe/cwe-074 * external/cwe/cwe-400 diff --git a/java/ql/src/experimental/Security/CWE/CWE-036/OpenStream.ql b/java/ql/src/experimental/Security/CWE/CWE-036/OpenStream.ql index dd23cfd5ff8..f3fe58e59e0 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-036/OpenStream.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-036/OpenStream.ql @@ -7,6 +7,7 @@ * @precision medium * @id java/openstream-called-on-tainted-url * @tags security + * experimental * external/cwe/cwe-036 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-073/FilePathInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-073/FilePathInjection.ql index 9c976c8dce7..3bb8ef93fd2 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-073/FilePathInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-073/FilePathInjection.ql @@ -8,6 +8,7 @@ * @precision high * @id java/file-path-injection * @tags security + * experimental * external/cwe-073 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-078/ExecTainted.ql b/java/ql/src/experimental/Security/CWE/CWE-078/ExecTainted.ql index 7915d8f2bce..e672519d1c7 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-078/ExecTainted.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-078/ExecTainted.ql @@ -7,6 +7,7 @@ * @precision high * @id java/command-line-injection-experimental * @tags security + * experimental * external/cwe/cwe-078 * external/cwe/cwe-088 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisAnnotationSqlInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisAnnotationSqlInjection.ql index 2d1e605c426..35bfa0f0e17 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisAnnotationSqlInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisAnnotationSqlInjection.ql @@ -8,6 +8,7 @@ * @precision high * @id java/mybatis-annotation-sql-injection * @tags security + * experimental * external/cwe/cwe-089 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisMapperXmlSqlInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisMapperXmlSqlInjection.ql index 9aeb95ea94a..53359d448de 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisMapperXmlSqlInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-089/MyBatisMapperXmlSqlInjection.ql @@ -8,6 +8,7 @@ * @precision high * @id java/mybatis-xml-sql-injection * @tags security + * experimental * external/cwe/cwe-089 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/BeanShellInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-094/BeanShellInjection.ql index b8301d4f977..5c4b4288eab 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/BeanShellInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/BeanShellInjection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/beanshell-injection * @tags security + * experimental * external/cwe/cwe-094 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/InsecureDexLoading.ql b/java/ql/src/experimental/Security/CWE/CWE-094/InsecureDexLoading.ql index bae3ed63d70..5c0eb61253b 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/InsecureDexLoading.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/InsecureDexLoading.ql @@ -7,6 +7,7 @@ * @precision high * @id java/android-insecure-dex-loading * @tags security + * experimental * external/cwe/cwe-094 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/JShellInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-094/JShellInjection.ql index 451dff79444..bda4d170c60 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/JShellInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/JShellInjection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/jshell-injection * @tags security + * experimental * external/cwe/cwe-094 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/JakartaExpressionInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-094/JakartaExpressionInjection.ql index 8190ec3d61f..5b09d0ac2d8 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/JakartaExpressionInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/JakartaExpressionInjection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/javaee-expression-injection * @tags security + * experimental * external/cwe/cwe-094 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/JythonInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-094/JythonInjection.ql index a3dc6e6c39a..743d6e9351f 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/JythonInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/JythonInjection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/jython-injection * @tags security + * experimental * external/cwe/cwe-094 * external/cwe/cwe-095 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/ScriptInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-094/ScriptInjection.ql index a7bb5fb0d18..5c1f5e17311 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/ScriptInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/ScriptInjection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/unsafe-eval * @tags security + * experimental * external/cwe/cwe-094 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/SpringImplicitViewManipulation.ql b/java/ql/src/experimental/Security/CWE/CWE-094/SpringImplicitViewManipulation.ql index e176c513213..a99664f49f0 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/SpringImplicitViewManipulation.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/SpringImplicitViewManipulation.ql @@ -6,6 +6,7 @@ * @precision high * @id java/spring-view-manipulation-implicit * @tags security + * experimental * external/cwe/cwe-094 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-094/SpringViewManipulation.ql b/java/ql/src/experimental/Security/CWE/CWE-094/SpringViewManipulation.ql index 3c490e6bf68..118f15860fc 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-094/SpringViewManipulation.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-094/SpringViewManipulation.ql @@ -6,6 +6,7 @@ * @precision high * @id java/spring-view-manipulation * @tags security + * experimental * external/cwe/cwe-094 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-1004/InsecureTomcatConfig.ql b/java/ql/src/experimental/Security/CWE/CWE-1004/InsecureTomcatConfig.ql index 5d259b63b14..4cf82d26714 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-1004/InsecureTomcatConfig.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-1004/InsecureTomcatConfig.ql @@ -6,6 +6,7 @@ * @precision medium * @id java/tomcat-disabled-httponly * @tags security + * experimental * external/cwe/cwe-1004 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql b/java/ql/src/experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql index 1ee1bccd2f9..a43387a24b0 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql @@ -7,6 +7,7 @@ * @precision medium * @id java/sensitive-cookie-not-httponly * @tags security + * experimental * external/cwe/cwe-1004 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-200/InsecureWebResourceResponse.ql b/java/ql/src/experimental/Security/CWE/CWE-200/InsecureWebResourceResponse.ql index 7327f2cebf2..41b7cc0e1e3 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-200/InsecureWebResourceResponse.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-200/InsecureWebResourceResponse.ql @@ -6,6 +6,7 @@ * @id java/insecure-webview-resource-response * @problem.severity error * @tags security + * experimental * external/cwe/cwe-200 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-200/SensitiveAndroidFileLeak.ql b/java/ql/src/experimental/Security/CWE/CWE-200/SensitiveAndroidFileLeak.ql index 9769ee1eafc..38d128ee81a 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-200/SensitiveAndroidFileLeak.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-200/SensitiveAndroidFileLeak.ql @@ -6,6 +6,7 @@ * @id java/sensitive-android-file-leak * @problem.severity warning * @tags security + * experimental * external/cwe/cwe-200 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-208/PossibleTimingAttackAgainstSignature.ql b/java/ql/src/experimental/Security/CWE/CWE-208/PossibleTimingAttackAgainstSignature.ql index 9e0835e2aac..f569bdb0107 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-208/PossibleTimingAttackAgainstSignature.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-208/PossibleTimingAttackAgainstSignature.ql @@ -9,6 +9,7 @@ * @precision medium * @id java/possible-timing-attack-against-signature * @tags security + * experimental * external/cwe/cwe-208 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql b/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql index 52405e9958e..1f92d09693f 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstHeader.ql @@ -7,6 +7,7 @@ * @precision high * @id java/timing-attack-against-headers-value * @tags security + * experimental * external/cwe/cwe-208 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstSignature.ql b/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstSignature.ql index 488b49684b2..15812817205 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstSignature.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-208/TimingAttackAgainstSignature.ql @@ -10,6 +10,7 @@ * @precision high * @id java/timing-attack-against-signature * @tags security + * experimental * external/cwe/cwe-208 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-295/JxBrowserWithoutCertValidation.ql b/java/ql/src/experimental/Security/CWE/CWE-295/JxBrowserWithoutCertValidation.ql index f664f4ce953..8e91ea4bb56 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-295/JxBrowserWithoutCertValidation.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-295/JxBrowserWithoutCertValidation.ql @@ -8,6 +8,7 @@ * @precision medium * @id java/jxbrowser/disabled-certificate-validation * @tags security + * experimental * external/cwe/cwe-295 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-297/IgnoredHostnameVerification.ql b/java/ql/src/experimental/Security/CWE/CWE-297/IgnoredHostnameVerification.ql index c4bb1192f2b..2a60ce988fc 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-297/IgnoredHostnameVerification.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-297/IgnoredHostnameVerification.ql @@ -7,6 +7,7 @@ * @precision high * @id java/ignored-hostname-verification * @tags security + * experimental * external/cwe/cwe-297 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-297/InsecureLdapEndpoint.ql b/java/ql/src/experimental/Security/CWE/CWE-297/InsecureLdapEndpoint.ql index 5ac93ffac2a..bba8213cf0a 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-297/InsecureLdapEndpoint.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-297/InsecureLdapEndpoint.ql @@ -8,6 +8,7 @@ * @precision medium * @id java/insecure-ldaps-endpoint * @tags security + * experimental * external/cwe/cwe-297 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-299/DisabledRevocationChecking.ql b/java/ql/src/experimental/Security/CWE/CWE-299/DisabledRevocationChecking.ql index a6d2049bd16..6d4c46d755e 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-299/DisabledRevocationChecking.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-299/DisabledRevocationChecking.ql @@ -7,6 +7,7 @@ * @precision high * @id java/disabled-certificate-revocation-checking * @tags security + * experimental * external/cwe/cwe-299 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-321/HardcodedJwtKey.ql b/java/ql/src/experimental/Security/CWE/CWE-321/HardcodedJwtKey.ql index 63c55793cbf..521a355bdab 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-321/HardcodedJwtKey.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-321/HardcodedJwtKey.ql @@ -5,6 +5,7 @@ * @problem.severity error * @id java/hardcoded-jwt-key * @tags security + * experimental * external/cwe/cwe-321 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-327/UnsafeTlsVersion.ql b/java/ql/src/experimental/Security/CWE/CWE-327/UnsafeTlsVersion.ql index 3a1195d8a7c..e5ec5284347 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-327/UnsafeTlsVersion.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-327/UnsafeTlsVersion.ql @@ -7,6 +7,7 @@ * @precision high * @id java/unsafe-tls-version * @tags security + * experimental * external/cwe/cwe-327 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-346/UnvalidatedCors.ql b/java/ql/src/experimental/Security/CWE/CWE-346/UnvalidatedCors.ql index c5a6c36d6a6..5f6146e2bc4 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-346/UnvalidatedCors.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-346/UnvalidatedCors.ql @@ -6,6 +6,7 @@ * @precision high * @id java/unvalidated-cors-origin-set * @tags security + * experimental * external/cwe/cwe-346 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql b/java/ql/src/experimental/Security/CWE/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql index 78d8bfee5f0..a7be1729279 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql @@ -7,6 +7,7 @@ * @precision high * @id java/ip-address-spoofing * @tags security + * experimental * external/cwe/cwe-348 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.ql index 71ee842f162..9518a04ff6f 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/jsonp-injection * @tags security + * experimental * external/cwe/cwe-352 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-400/ThreadResourceAbuse.ql b/java/ql/src/experimental/Security/CWE/CWE-400/ThreadResourceAbuse.ql index a3ef56f82cb..a1e9ea0ccac 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-400/ThreadResourceAbuse.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-400/ThreadResourceAbuse.ql @@ -6,6 +6,7 @@ * @id java/thread-resource-abuse * @problem.severity warning * @tags security + * experimental * external/cwe/cwe-400 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-470/UnsafeReflection.ql b/java/ql/src/experimental/Security/CWE/CWE-470/UnsafeReflection.ql index 6ff2bc27dd4..291b57e3713 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-470/UnsafeReflection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-470/UnsafeReflection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/unsafe-reflection * @tags security + * experimental * external/cwe/cwe-470 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-489/EJBMain.ql b/java/ql/src/experimental/Security/CWE/CWE-489/EJBMain.ql index fe69f2d9cea..4bb636fe6a9 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-489/EJBMain.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-489/EJBMain.ql @@ -6,6 +6,7 @@ * @precision medium * @id java/main-method-in-enterprise-bean * @tags security + * experimental * external/cwe/cwe-489 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-489/WebComponentMain.ql b/java/ql/src/experimental/Security/CWE/CWE-489/WebComponentMain.ql index c4b05b9fe2f..38e12700d1a 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-489/WebComponentMain.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-489/WebComponentMain.ql @@ -6,6 +6,7 @@ * @precision medium * @id java/main-method-in-web-components * @tags security + * experimental * external/cwe/cwe-489 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-489/devMode.ql b/java/ql/src/experimental/Security/CWE/CWE-489/devMode.ql index b9a41ba0271..96fd62e593c 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-489/devMode.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-489/devMode.ql @@ -7,6 +7,7 @@ * @precision high * @id java/struts-development-mode * @tags security + * experimental * external/cwe/cwe-489 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeDeserializationRmi.ql b/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeDeserializationRmi.ql index 2928ea76165..8582f8a1b5b 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeDeserializationRmi.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeDeserializationRmi.ql @@ -9,6 +9,7 @@ * @precision high * @id java/unsafe-deserialization-rmi * @tags security + * experimental * external/cwe/cwe-502 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInConfigurationClass.ql b/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInConfigurationClass.ql index 2914ebd7be2..28b164faa0d 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInConfigurationClass.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInConfigurationClass.ql @@ -8,6 +8,7 @@ * @precision high * @id java/unsafe-deserialization-spring-exporter-in-configuration-class * @tags security + * experimental * external/cwe/cwe-502 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInXMLConfiguration.ql b/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInXMLConfiguration.ql index c2a8721e643..d580d983950 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInXMLConfiguration.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-502/UnsafeSpringExporterInXMLConfiguration.ql @@ -8,6 +8,7 @@ * @precision high * @id java/unsafe-deserialization-spring-exporter-in-xml-configuration * @tags security + * experimental * external/cwe/cwe-502 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.ql b/java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.ql index de6034e9466..5f2bda49f7c 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-522/InsecureLdapAuth.ql @@ -6,6 +6,7 @@ * @precision medium * @id java/insecure-ldap-auth * @tags security + * experimental * external/cwe/cwe-522 * external/cwe/cwe-319 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-548/InsecureDirectoryConfig.ql b/java/ql/src/experimental/Security/CWE/CWE-548/InsecureDirectoryConfig.ql index e4bc4b8912f..55c55092104 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-548/InsecureDirectoryConfig.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-548/InsecureDirectoryConfig.ql @@ -9,6 +9,7 @@ * @precision medium * @id java/server-directory-listing * @tags security + * experimental * external/cwe/cwe-548 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.ql b/java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.ql index e7c70a695b6..aa27fd9773f 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.ql @@ -7,6 +7,7 @@ * @precision high * @id java/unsafe-url-forward-dispatch-load * @tags security + * experimental * external/cwe-552 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-555/CredentialsInPropertiesFile.ql b/java/ql/src/experimental/Security/CWE/CWE-555/CredentialsInPropertiesFile.ql index 1ba429bd752..3c5d8e01856 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-555/CredentialsInPropertiesFile.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-555/CredentialsInPropertiesFile.ql @@ -6,6 +6,7 @@ * @precision high * @id java/credentials-in-properties * @tags security + * experimental * external/cwe/cwe-555 * external/cwe/cwe-256 * external/cwe/cwe-260 diff --git a/java/ql/src/experimental/Security/CWE/CWE-555/PasswordInConfigurationFile.ql b/java/ql/src/experimental/Security/CWE/CWE-555/PasswordInConfigurationFile.ql index d61119fc853..e13e69dfa6e 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-555/PasswordInConfigurationFile.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-555/PasswordInConfigurationFile.ql @@ -6,6 +6,7 @@ * @precision medium * @id java/password-in-configuration * @tags security + * experimental * external/cwe/cwe-555 * external/cwe/cwe-256 * external/cwe/cwe-260 diff --git a/java/ql/src/experimental/Security/CWE/CWE-598/SensitiveGetQuery.ql b/java/ql/src/experimental/Security/CWE/CWE-598/SensitiveGetQuery.ql index 45ab668af48..b436c3ccabd 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-598/SensitiveGetQuery.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-598/SensitiveGetQuery.ql @@ -6,6 +6,7 @@ * @precision medium * @id java/sensitive-query-with-get * @tags security + * experimental * external/cwe/cwe-598 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-600/UncaughtServletException.ql b/java/ql/src/experimental/Security/CWE/CWE-600/UncaughtServletException.ql index f3ab1f166e7..14149c784a0 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-600/UncaughtServletException.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-600/UncaughtServletException.ql @@ -9,6 +9,7 @@ * @precision medium * @id java/uncaught-servlet-exception * @tags security + * experimental * external/cwe/cwe-600 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-601/SpringUrlRedirect.ql b/java/ql/src/experimental/Security/CWE/CWE-601/SpringUrlRedirect.ql index 3cef2b4fc41..a9995638793 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-601/SpringUrlRedirect.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-601/SpringUrlRedirect.ql @@ -7,6 +7,7 @@ * @precision high * @id java/spring-unvalidated-url-redirection * @tags security + * experimental * external/cwe/cwe-601 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-611/XXE.ql b/java/ql/src/experimental/Security/CWE/CWE-611/XXE.ql index 0e1fdd72223..563164aa155 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-611/XXE.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-611/XXE.ql @@ -8,6 +8,7 @@ * @precision high * @id java/xxe-with-experimental-sinks * @tags security + * experimental * external/cwe/cwe-611 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-611/XXELocal.ql b/java/ql/src/experimental/Security/CWE/CWE-611/XXELocal.ql index 2d3ee9ec785..aad3674e969 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-611/XXELocal.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-611/XXELocal.ql @@ -10,6 +10,7 @@ * @precision medium * @id java/xxe-local-experimental-sinks * @tags security + * experimental * external/cwe/cwe-611 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql b/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql index 7319c75320a..b24b36053b8 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql @@ -7,6 +7,7 @@ * @precision high * @id java/permissive-dot-regex * @tags security + * experimental * external/cwe-625 * external/cwe-863 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-652/XQueryInjection.ql b/java/ql/src/experimental/Security/CWE/CWE-652/XQueryInjection.ql index 0bb85272f08..bf2d8bc2747 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-652/XQueryInjection.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-652/XQueryInjection.ql @@ -7,6 +7,7 @@ * @precision high * @id java/xquery-injection * @tags security + * experimental * external/cwe/cwe-652 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql b/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql index 9733ccf7b55..f69630bfff2 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql @@ -4,6 +4,7 @@ * @kind problem * @problem.severity error * @tags security + * experimental * external/cwe/cwe-665 * @precision high * @id java/insecure-rmi-jmx-server-initialization diff --git a/java/ql/src/experimental/Security/CWE/CWE-755/NFEAndroidDoS.ql b/java/ql/src/experimental/Security/CWE/CWE-755/NFEAndroidDoS.ql index 9793430a2ee..1682c8e03a1 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-755/NFEAndroidDoS.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-755/NFEAndroidDoS.ql @@ -9,6 +9,7 @@ * @precision medium * @id java/android/nfe-local-android-dos * @tags security + * experimental * external/cwe/cwe-755 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql b/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql index b28ebee2936..5d2664749ff 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql @@ -6,6 +6,7 @@ * @precision low * @id java/hash-without-salt * @tags security + * experimental * external/cwe/cwe-759 */ diff --git a/java/ql/src/experimental/Security/CWE/CWE-939/IncorrectURLVerification.ql b/java/ql/src/experimental/Security/CWE/CWE-939/IncorrectURLVerification.ql index 662a1f0f495..bd287fc4a39 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-939/IncorrectURLVerification.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-939/IncorrectURLVerification.ql @@ -8,6 +8,7 @@ * @precision medium * @id java/incorrect-url-verification * @tags security + * experimental * external/cwe/cwe-939 */ diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index cd275edc94b..1799982afc3 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 0.5.1-dev +version: 0.5.2-dev groups: - java - queries diff --git a/java/ql/src/utils/model-generator/CaptureNeutralModels.ql b/java/ql/src/utils/modelgenerator/CaptureNeutralModels.ql similarity index 56% rename from java/ql/src/utils/model-generator/CaptureNeutralModels.ql rename to java/ql/src/utils/modelgenerator/CaptureNeutralModels.ql index 96744de89b6..1f0c9fa5427 100644 --- a/java/ql/src/utils/model-generator/CaptureNeutralModels.ql +++ b/java/ql/src/utils/modelgenerator/CaptureNeutralModels.ql @@ -2,12 +2,12 @@ * @name Capture neutral models. * @description Finds neutral models to be used by other queries. * @kind diagnostic - * @id java/utils/model-generator/neutral-models - * @tags model-generator + * @id java/utils/modelgenerator/neutral-models + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureModels -import utils.modelgenerator.internal.CaptureSummaryFlow +import internal.CaptureModels +import internal.CaptureSummaryFlow from DataFlowTargetApi api, string noflow where noflow = captureNoFlow(api) diff --git a/java/ql/src/utils/model-generator/CaptureSinkModels.ql b/java/ql/src/utils/modelgenerator/CaptureSinkModels.ql similarity index 73% rename from java/ql/src/utils/model-generator/CaptureSinkModels.ql rename to java/ql/src/utils/modelgenerator/CaptureSinkModels.ql index f047a8a13af..8d273ba77f8 100644 --- a/java/ql/src/utils/model-generator/CaptureSinkModels.ql +++ b/java/ql/src/utils/modelgenerator/CaptureSinkModels.ql @@ -2,11 +2,11 @@ * @name Capture sink models. * @description Finds public methods that act as sinks as they flow into a known sink. * @kind diagnostic - * @id java/utils/model-generator/sink-models - * @tags model-generator + * @id java/utils/modelgenerator/sink-models + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureModels +import internal.CaptureModels class Activate extends ActiveConfiguration { override predicate activateToSinkConfig() { any() } diff --git a/java/ql/src/utils/model-generator/CaptureSourceModels.ql b/java/ql/src/utils/modelgenerator/CaptureSourceModels.ql similarity index 74% rename from java/ql/src/utils/model-generator/CaptureSourceModels.ql rename to java/ql/src/utils/modelgenerator/CaptureSourceModels.ql index 7dfc8e0ad34..f4fc9982797 100644 --- a/java/ql/src/utils/model-generator/CaptureSourceModels.ql +++ b/java/ql/src/utils/modelgenerator/CaptureSourceModels.ql @@ -2,11 +2,11 @@ * @name Capture source models. * @description Finds APIs that act as sources as they expose already known sources. * @kind diagnostic - * @id java/utils/model-generator/source-models - * @tags model-generator + * @id java/utils/modelgenerator/source-models + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureModels +import internal.CaptureModels class Activate extends ActiveConfiguration { override predicate activateFromSourceConfig() { any() } diff --git a/java/ql/src/utils/model-generator/CaptureSummaryModels.ql b/java/ql/src/utils/modelgenerator/CaptureSummaryModels.ql similarity index 56% rename from java/ql/src/utils/model-generator/CaptureSummaryModels.ql rename to java/ql/src/utils/modelgenerator/CaptureSummaryModels.ql index a8d23ca5b34..33d07d5f2c1 100644 --- a/java/ql/src/utils/model-generator/CaptureSummaryModels.ql +++ b/java/ql/src/utils/modelgenerator/CaptureSummaryModels.ql @@ -2,12 +2,12 @@ * @name Capture summary models. * @description Finds applicable summary models to be used by other queries. * @kind diagnostic - * @id java/utils/model-generator/summary-models - * @tags model-generator + * @id java/utils/modelgenerator/summary-models + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureModels -import utils.modelgenerator.internal.CaptureSummaryFlow +import internal.CaptureModels +import internal.CaptureSummaryFlow from DataFlowTargetApi api, string flow where flow = captureFlow(api) diff --git a/java/ql/src/utils/model-generator/CaptureTypeBasedSummaryModels.ql b/java/ql/src/utils/modelgenerator/CaptureTypeBasedSummaryModels.ql similarity index 62% rename from java/ql/src/utils/model-generator/CaptureTypeBasedSummaryModels.ql rename to java/ql/src/utils/modelgenerator/CaptureTypeBasedSummaryModels.ql index 1cdb5fe959f..f0a33731a87 100644 --- a/java/ql/src/utils/model-generator/CaptureTypeBasedSummaryModels.ql +++ b/java/ql/src/utils/modelgenerator/CaptureTypeBasedSummaryModels.ql @@ -2,11 +2,11 @@ * @name Capture typed based summary models. * @description Finds applicable summary models to be used by other queries. * @kind diagnostic - * @id java/utils/model-generator/summary-models-typed-based - * @tags model-generator + * @id java/utils/modelgenerator/summary-models-typed-based + * @tags modelgenerator */ -import utils.modelgenerator.internal.CaptureTypeBasedSummaryModels +import internal.CaptureTypeBasedSummaryModels from TypeBasedFlowTargetApi api, string flow where flow = captureFlow(api) diff --git a/java/ql/src/utils/model-generator/GenerateFlowModel.py b/java/ql/src/utils/modelgenerator/GenerateFlowModel.py similarity index 100% rename from java/ql/src/utils/model-generator/GenerateFlowModel.py rename to java/ql/src/utils/modelgenerator/GenerateFlowModel.py diff --git a/java/ql/src/utils/model-generator/RegenerateModels.py b/java/ql/src/utils/modelgenerator/RegenerateModels.py similarity index 97% rename from java/ql/src/utils/model-generator/RegenerateModels.py rename to java/ql/src/utils/modelgenerator/RegenerateModels.py index 6bea57793a0..1f7df71776b 100755 --- a/java/ql/src/utils/model-generator/RegenerateModels.py +++ b/java/ql/src/utils/modelgenerator/RegenerateModels.py @@ -35,7 +35,7 @@ def regenerateModel(lgtmSlug, extractedDb): sys.exit(1) modelFile = lgtmSlugToModelFile[lgtmSlug] codeQlRoot = findGitRoot() - subprocess.check_call([codeQlRoot + "/java/ql/src/utils/model-generator/GenerateFlowModel.py", + subprocess.check_call([codeQlRoot + "/java/ql/src/utils/modelgenerator/GenerateFlowModel.py", "--with-summaries", "--with-sinks", "--with-neutrals", extractedDb, modelFile]) print("Regenerated " + modelFile) diff --git a/java/ql/test/experimental/query-tests/security/CWE-400/ThreadResourceAbuse.expected b/java/ql/test/experimental/query-tests/security/CWE-400/ThreadResourceAbuse.expected index f8d18994ac0..a510070daf9 100644 --- a/java/ql/test/experimental/query-tests/security/CWE-400/ThreadResourceAbuse.expected +++ b/java/ql/test/experimental/query-tests/security/CWE-400/ThreadResourceAbuse.expected @@ -12,14 +12,8 @@ edges | ThreadResourceAbuse.java:71:15:71:17 | parameter this [waitTime] : Number | ThreadResourceAbuse.java:74:18:74:25 | this <.field> [waitTime] : Number | | ThreadResourceAbuse.java:74:18:74:25 | this <.field> [waitTime] : Number | ThreadResourceAbuse.java:74:18:74:25 | waitTime | | ThreadResourceAbuse.java:141:27:141:43 | getValue(...) : String | ThreadResourceAbuse.java:144:34:144:42 | delayTime | -| ThreadResourceAbuse.java:172:19:172:50 | getHeader(...) : String | ThreadResourceAbuse.java:173:37:173:42 | header : String | | ThreadResourceAbuse.java:172:19:172:50 | getHeader(...) : String | ThreadResourceAbuse.java:176:17:176:26 | retryAfter | -| ThreadResourceAbuse.java:173:20:173:43 | parseInt(...) : Number | ThreadResourceAbuse.java:176:17:176:26 | retryAfter | -| ThreadResourceAbuse.java:173:37:173:42 | header : String | ThreadResourceAbuse.java:173:20:173:43 | parseInt(...) : Number | -| ThreadResourceAbuse.java:206:28:206:56 | getParameter(...) : String | ThreadResourceAbuse.java:207:39:207:52 | uploadDelayStr : String | | ThreadResourceAbuse.java:206:28:206:56 | getParameter(...) : String | ThreadResourceAbuse.java:209:49:209:59 | uploadDelay : Number | -| ThreadResourceAbuse.java:207:22:207:53 | parseInt(...) : Number | ThreadResourceAbuse.java:209:49:209:59 | uploadDelay : Number | -| ThreadResourceAbuse.java:207:39:207:52 | uploadDelayStr : String | ThreadResourceAbuse.java:207:22:207:53 | parseInt(...) : Number | | ThreadResourceAbuse.java:209:30:209:87 | new UploadListener(...) [slowUploads] : Number | UploadListener.java:28:14:28:19 | parameter this [slowUploads] : Number | | ThreadResourceAbuse.java:209:49:209:59 | uploadDelay : Number | ThreadResourceAbuse.java:209:30:209:87 | new UploadListener(...) [slowUploads] : Number | | ThreadResourceAbuse.java:209:49:209:59 | uploadDelay : Number | UploadListener.java:15:24:15:44 | sleepMilliseconds : Number | @@ -48,12 +42,8 @@ nodes | ThreadResourceAbuse.java:141:27:141:43 | getValue(...) : String | semmle.label | getValue(...) : String | | ThreadResourceAbuse.java:144:34:144:42 | delayTime | semmle.label | delayTime | | ThreadResourceAbuse.java:172:19:172:50 | getHeader(...) : String | semmle.label | getHeader(...) : String | -| ThreadResourceAbuse.java:173:20:173:43 | parseInt(...) : Number | semmle.label | parseInt(...) : Number | -| ThreadResourceAbuse.java:173:37:173:42 | header : String | semmle.label | header : String | | ThreadResourceAbuse.java:176:17:176:26 | retryAfter | semmle.label | retryAfter | | ThreadResourceAbuse.java:206:28:206:56 | getParameter(...) : String | semmle.label | getParameter(...) : String | -| ThreadResourceAbuse.java:207:22:207:53 | parseInt(...) : Number | semmle.label | parseInt(...) : Number | -| ThreadResourceAbuse.java:207:39:207:52 | uploadDelayStr : String | semmle.label | uploadDelayStr : String | | ThreadResourceAbuse.java:209:30:209:87 | new UploadListener(...) [slowUploads] : Number | semmle.label | new UploadListener(...) [slowUploads] : Number | | ThreadResourceAbuse.java:209:49:209:59 | uploadDelay : Number | semmle.label | uploadDelay : Number | | UploadListener.java:15:24:15:44 | sleepMilliseconds : Number | semmle.label | sleepMilliseconds : Number | diff --git a/java/ql/test/experimental/query-tests/security/CWE-755/NFEAndroidDoS.expected b/java/ql/test/experimental/query-tests/security/CWE-755/NFEAndroidDoS.expected index 29c1daf500c..73657a38158 100644 --- a/java/ql/test/experimental/query-tests/security/CWE-755/NFEAndroidDoS.expected +++ b/java/ql/test/experimental/query-tests/security/CWE-755/NFEAndroidDoS.expected @@ -3,12 +3,8 @@ edges | NFEAndroidDoS.java:13:24:13:61 | getStringExtra(...) : Object | NFEAndroidDoS.java:14:21:14:51 | parseDouble(...) | | NFEAndroidDoS.java:22:21:22:31 | getIntent(...) : Intent | NFEAndroidDoS.java:22:21:22:55 | getStringExtra(...) : Object | | NFEAndroidDoS.java:22:21:22:55 | getStringExtra(...) : Object | NFEAndroidDoS.java:23:15:23:40 | parseInt(...) | -| NFEAndroidDoS.java:22:21:22:55 | getStringExtra(...) : Object | NFEAndroidDoS.java:23:32:23:39 | widthStr : Object | -| NFEAndroidDoS.java:23:32:23:39 | widthStr : Object | NFEAndroidDoS.java:23:15:23:40 | parseInt(...) | | NFEAndroidDoS.java:25:22:25:32 | getIntent(...) : Intent | NFEAndroidDoS.java:25:22:25:57 | getStringExtra(...) : Object | | NFEAndroidDoS.java:25:22:25:57 | getStringExtra(...) : Object | NFEAndroidDoS.java:26:16:26:42 | parseInt(...) | -| NFEAndroidDoS.java:25:22:25:57 | getStringExtra(...) : Object | NFEAndroidDoS.java:26:33:26:41 | heightStr : Object | -| NFEAndroidDoS.java:26:33:26:41 | heightStr : Object | NFEAndroidDoS.java:26:16:26:42 | parseInt(...) | | NFEAndroidDoS.java:43:24:43:34 | getIntent(...) : Intent | NFEAndroidDoS.java:43:24:43:61 | getStringExtra(...) : Object | | NFEAndroidDoS.java:43:24:43:61 | getStringExtra(...) : Object | NFEAndroidDoS.java:44:21:44:43 | new Double(...) | | NFEAndroidDoS.java:43:24:43:61 | getStringExtra(...) : Object | NFEAndroidDoS.java:47:21:47:47 | valueOf(...) | @@ -19,11 +15,9 @@ nodes | NFEAndroidDoS.java:22:21:22:31 | getIntent(...) : Intent | semmle.label | getIntent(...) : Intent | | NFEAndroidDoS.java:22:21:22:55 | getStringExtra(...) : Object | semmle.label | getStringExtra(...) : Object | | NFEAndroidDoS.java:23:15:23:40 | parseInt(...) | semmle.label | parseInt(...) | -| NFEAndroidDoS.java:23:32:23:39 | widthStr : Object | semmle.label | widthStr : Object | | NFEAndroidDoS.java:25:22:25:32 | getIntent(...) : Intent | semmle.label | getIntent(...) : Intent | | NFEAndroidDoS.java:25:22:25:57 | getStringExtra(...) : Object | semmle.label | getStringExtra(...) : Object | | NFEAndroidDoS.java:26:16:26:42 | parseInt(...) | semmle.label | parseInt(...) | -| NFEAndroidDoS.java:26:33:26:41 | heightStr : Object | semmle.label | heightStr : Object | | NFEAndroidDoS.java:43:24:43:34 | getIntent(...) : Intent | semmle.label | getIntent(...) : Intent | | NFEAndroidDoS.java:43:24:43:61 | getStringExtra(...) : Object | semmle.label | getStringExtra(...) : Object | | NFEAndroidDoS.java:44:21:44:43 | new Double(...) | semmle.label | new Double(...) | diff --git a/java/ql/test/ext/TestModels/Test.java b/java/ql/test/ext/TestModels/Test.java index e2b681e9092..a64f4ec71c0 100644 --- a/java/ql/test/ext/TestModels/Test.java +++ b/java/ql/test/ext/TestModels/Test.java @@ -1,5 +1,15 @@ +import java.io.IOException; +import java.io.File; import java.math.BigDecimal; +import java.sql.Connection; +import java.sql.DriverManager; +import java.sql.PreparedStatement; import java.sql.ResultSet; +import java.util.StringJoiner; +import java.util.concurrent.atomic.AtomicReference; +import java.util.function.Function; +import java.util.function.Supplier; +import java.util.stream.Collectors; public class Test { @@ -9,37 +19,67 @@ public class Test { public void test() throws Exception { - Exception e1 = new RuntimeException((String)source()); - sink((String)e1.getMessage()); // $hasValueFlow + // top 100 JDK APIs tests + { + Exception e1 = new RuntimeException((String)source()); + sink((String)e1.getMessage()); // $hasValueFlow - Exception e2 = new RuntimeException((Throwable)source()); - sink((Throwable)e2.getCause()); // $hasValueFlow + Exception e2 = new RuntimeException((Throwable)source()); + sink((Throwable)e2.getCause()); // $hasValueFlow - Exception e3 = new IllegalArgumentException((String)source()); - sink((String)e3.getMessage()); // $hasValueFlow + Exception e3 = new IllegalArgumentException((String)source()); + sink((String)e3.getMessage()); // $hasValueFlow - Exception e4 = new IllegalStateException((String)source()); - sink((String)e4.getMessage()); // $hasValueFlow + Exception e4 = new IllegalStateException((String)source()); + sink((String)e4.getMessage()); // $hasValueFlow - Throwable t = new Throwable((Throwable)source()); - sink((Throwable)t.getCause()); // $hasValueFlow + Throwable t = new Throwable((Throwable)source()); + sink((Throwable)t.getCause()); // $hasValueFlow - Integer x = (Integer)source(); - int y = x; - sink(String.valueOf(y)); // $hasTaintFlow + String s2 = (String)source(); + int i = 0; + sink(s2.charAt(i)); // $hasTaintFlow - String s1 = (String)source(); - sink(Integer.parseInt(s1)); // $hasTaintFlow + ResultSet rs = (ResultSet)source(); + sink(rs.getString("")); // $hasTaintFlow + } - String s2 = (String)source(); - int i = 0; - sink(s2.charAt(i)); // $hasTaintFlow + // top 200 JDK APIs tests + { + // java.io + Exception e1 = new IOException((String)source()); + sink((String)e1.getMessage()); // $hasValueFlow - String s3 = (String)source(); - sink(new BigDecimal(s3)); // $hasTaintFlow + File f = (File)source(); + sink(f.getName()); // $hasTaintFlow - ResultSet rs = (ResultSet)source(); - sink(rs.getString("")); // $hasTaintFlow + // java.lang + Exception e2 = new Exception((String)source()); + sink((String)e2.getMessage()); // $hasValueFlow + Exception e3 = new IndexOutOfBoundsException((String)source()); + sink((String)e3.getMessage()); // $hasValueFlow + + Exception e4 = new RuntimeException((String)source(), (Throwable)source()); + sink((String)e4.getMessage()); // $hasValueFlow + sink((Throwable)e4.getCause()); // $hasValueFlow + + // java.sql + Connection con = DriverManager.getConnection(""); + PreparedStatement ps1 = con.prepareStatement("UPDATE EMPLOYEES SET NAME = ? WHERE ID = ?"); + ps1.setString(1, (String)source()); + sink(ps1); // $hasValueFlow + + // java.util.concurrent.atomic + AtomicReference ar = new AtomicReference(source()); + sink(ar.get()); // $hasValueFlow + + // java.util + StringJoiner sj1 = new StringJoiner(","); + sink(sj1.add((CharSequence)source())); // $hasTaintFlow + + StringJoiner sj2 = (StringJoiner)source(); + sink(sj2.add("test")); // $hasTaintFlow + } } } diff --git a/java/ql/test/ext/TopJdkApis/TopJdkApis.qll b/java/ql/test/ext/TopJdkApis/TopJdkApis.qll index 76892845054..9bd5e1f9623 100644 --- a/java/ql/test/ext/TopJdkApis/TopJdkApis.qll +++ b/java/ql/test/ext/TopJdkApis/TopJdkApis.qll @@ -57,7 +57,61 @@ predicate topJdkApiName(string apiName) { "java.nio.file.Path#resolve(String)", "java.lang.Enum#toString()", "java.lang.RuntimeException#RuntimeException(Throwable)", "java.util.Collection#size()", "java.lang.String#charAt(int)", "java.util.stream.Stream#forEach(Consumer)", - "java.util.Map#isEmpty()", "java.lang.String#valueOf(int)" + "java.util.Map#isEmpty()", "java.lang.String#valueOf(int)", + // top 200 JDK APIs + "java.lang.Integer#intValue()", "java.util.ArrayList#size()", + "java.util.ArrayList#ArrayList(int)", "java.util.function.Function#apply(Object)", + "java.util.stream.Stream#forEach(Consumer)", "java.util.ArrayList#get(int)", + "java.util.Set#iterator()", "java.util.stream.Collectors#toSet()", + "java.lang.String#replaceAll(String,String)", "java.lang.String#getBytes(Charset)", + "java.util.Objects#requireNonNull(Object)", "java.util.Objects#nonNull(Object)", + "java.lang.String#endsWith(String)", "java.lang.AbstractStringBuilder#length()", + "java.sql.PreparedStatement#setString(int,String)", + "java.util.regex.Pattern#matcher(CharSequence)", "java.nio.file.Path#toString()", + "java.time.Instant#now()", "java.io.File#getAbsolutePath()", + "java.util.Set#addAll(Collection)", "java.lang.Integer#valueOf(int)", + "java.util.HashSet#HashSet(Collection)", "java.lang.Integer#toString(int)", + "java.lang.StringBuilder#StringBuilder(String)", "java.lang.Thread#sleep(long)", + "java.lang.Thread#currentThread()", "java.util.Date#getTime()", + "java.io.Writer#write(String)", "java.lang.String#getBytes()", "java.io.File#exists()", + "java.lang.String#toUpperCase()", "java.lang.Long#parseLong(String)", + "java.util.Collections#emptyMap()", "java.util.Optional#orElseThrow(Supplier)", + "java.util.List#of(Object,Object)", "java.util.concurrent.CountDownLatch#countDown()", + "java.lang.Class#isAssignableFrom(Class)", + "java.lang.IndexOutOfBoundsException#IndexOutOfBoundsException(String)", + "java.lang.Throwable#getCause()", "java.util.Arrays#stream(Object[])", + "java.util.function.Supplier#get()", "java.lang.Exception#Exception(String)", + "java.util.function.Consumer#accept(Object)", "java.util.stream.Stream#anyMatch(Predicate)", + "java.util.List#clear()", "java.io.File#File(File,String)", + "java.lang.String#indexOf(String)", "java.util.List#iterator()", + "java.util.concurrent.CountDownLatch#CountDownLatch(int)", "java.sql.ResultSet#next()", + "java.sql.PreparedStatement#setInt(int,int)", + "java.util.concurrent.atomic.AtomicInteger#get()", + "java.util.stream.Collectors#toMap(Function,Function)", "java.lang.Math#min(int,int)", + "java.lang.Long#equals(Object)", "java.util.Properties#setProperty(String,String)", + "java.util.Map#getOrDefault(Object,Object)", "java.lang.System#getProperty(String)", + "java.util.stream.Stream#of(Object[])", "java.nio.file.Paths#get(String,String[])", + "java.math.BigDecimal#compareTo(BigDecimal)", "java.math.BigDecimal#valueOf(long)", + "java.lang.RuntimeException#RuntimeException(String,Throwable)", + "java.util.Collection#add(Object)", "java.util.Collections#emptySet()", + "java.util.stream.Stream#flatMap(Function)", + "java.util.concurrent.atomic.AtomicReference#get()", "java.util.Collection#isEmpty()", + "java.lang.StringBuffer#toString()", "java.util.Collections#singleton(Object)", + "java.io.File#getName()", "java.time.ZonedDateTime#now()", + "java.io.ByteArrayInputStream#ByteArrayInputStream(byte[])", "java.nio.file.Path#toFile()", + "java.util.Date#Date(long)", "java.lang.System#nanoTime()", + "java.util.Hashtable#put(Object,Object)", "java.util.Map#putAll(Map)", + "java.lang.Long#toString()", "java.util.List#toArray(Object[])", "java.io.File#toPath()", + "java.util.regex.Matcher#group(int)", "java.time.LocalDate#of(int,int,int)", + "java.lang.String#valueOf(long)", "java.math.BigDecimal#valueOf(double)", + "java.io.IOException#IOException(String)", "java.text.DateFormat#format(Date)", + "java.sql.ResultSet#getInt(String)", "java.util.Map#clear()", "java.util.HashSet#add(Object)", + "java.lang.Class#getClassLoader()", "java.lang.Boolean#equals(Object)", + "java.lang.String#concat(String)", "java.util.Collections#singletonMap(Object,Object)", + "java.util.Collection#iterator()", "java.util.Map#computeIfAbsent(Object,Function)", + "java.text.SimpleDateFormat#SimpleDateFormat(String)", + "java.util.StringJoiner#add(CharSequence)", "java.lang.Long#longValue()", + "java.util.stream.Collectors#joining(CharSequence)" ] } @@ -78,20 +132,26 @@ class TopJdkApi extends SummarizedCallableBase { } /** Holds if this API has a manual summary model. */ - private predicate hasManualSummary() { this.(SummarizedCallable).hasProvenance(false) } + private predicate hasManualSummary() { this.(SummarizedCallable).isManual() } /** Holds if this API has a manual neutral model. */ private predicate hasManualNeutral() { - this.(FlowSummaryImpl::Public::NeutralCallable).hasProvenance(false) + this.(FlowSummaryImpl::Public::NeutralCallable).isManual() } /** Holds if this API has a manual MaD model. */ predicate hasManualMadModel() { this.hasManualSummary() or this.hasManualNeutral() } /* - * Note: the following top-100 APIs are not modeled with MaD: - * java.util.stream.Stream#collect(Collector) : handled separately on a case-by-case basis as it is too complex for MaD - * java.lang.String#valueOf(Object) : also a complex case; an alias for `Object.toString`, except the dispatch is hidden - * java.lang.Throwable#printStackTrace() : should probably not be a general step, but there might be specialised queries that care + * Note: the following top JDK APIs are not modeled with MaD: + * `java.lang.String#valueOf(Object)`: a complex case; an alias for `Object.toString`, except the dispatch is hidden + * `java.lang.System#getProperty(String)`: needs to be modeled by regular CodeQL matching the get and set keys to reduce FPs + * `java.lang.Throwable#printStackTrace()`: should probably not be a general step, but there might be specialised queries that care + * `java.util.function.Consumer#accept(Object)`: specialized lambda flow + * `java.util.function.Function#apply(Object)`: specialized lambda flow + * `java.util.function.Supplier#get()`: lambda flow + * `java.util.stream.Collectors#joining(CharSequence)`: cannot be modeled completely without a model for `java.util.stream.Stream#collect(Collector)` as well + * `java.util.stream.Collectors#toMap(Function,Function)`: specialized collectors flow + * `java.util.stream.Stream#collect(Collector)`: handled separately on a case-by-case basis as it is too complex for MaD */ } diff --git a/java/ql/test/ext/TopJdkApis/TopJdkApisTest.expected b/java/ql/test/ext/TopJdkApis/TopJdkApisTest.expected index 773d9b2bfae..3ef93396b3b 100644 --- a/java/ql/test/ext/TopJdkApis/TopJdkApisTest.expected +++ b/java/ql/test/ext/TopJdkApis/TopJdkApisTest.expected @@ -1,3 +1,9 @@ | java.lang.String#valueOf(Object) | no manual model | +| java.lang.System#getProperty(String) | no manual model | | java.lang.Throwable#printStackTrace() | no manual model | +| java.util.function.Consumer#accept(Object) | no manual model | +| java.util.function.Function#apply(Object) | no manual model | +| java.util.function.Supplier#get() | no manual model | +| java.util.stream.Collectors#joining(CharSequence) | no manual model | +| java.util.stream.Collectors#toMap(Function,Function) | no manual model | | java.util.stream.Stream#collect(Collector) | no manual model | diff --git a/java/ql/test/ext/TopJdkApis/TopJdkApisTest.java b/java/ql/test/ext/TopJdkApis/TopJdkApisTest.java index 42779c6d8c1..49a7396ad64 100644 --- a/java/ql/test/ext/TopJdkApis/TopJdkApisTest.java +++ b/java/ql/test/ext/TopJdkApis/TopJdkApisTest.java @@ -1,14 +1,27 @@ +import java.io.ByteArrayInputStream; +import java.lang.IllegalStateException; +import java.lang.IndexOutOfBoundsException; +import java.lang.Math; +import java.lang.System; +import java.math.BigDecimal; +import java.nio.file.Paths; +import java.sql.ResultSet; +import java.text.DateFormat; +import java.text.SimpleDateFormat; import java.util.ArrayList; import java.util.Arrays; import java.util.Collections; -import java.util.Objects; -import java.util.UUID; -import java.util.stream.Collectors; -import java.util.Map; import java.util.HashMap; -import java.math.BigDecimal; -import java.sql.ResultSet; -import java.lang.System; -import java.lang.IllegalStateException; +import java.util.HashSet; +import java.util.Map; +import java.util.Objects; +import java.util.StringJoiner; +import java.util.UUID; +import java.util.concurrent.CountDownLatch; +import java.util.concurrent.atomic.AtomicInteger; +import java.util.concurrent.atomic.AtomicReference; +import java.util.regex.Matcher; +import java.util.regex.Pattern; +import java.util.stream.Collectors; public class TopJdkApisTest { } diff --git a/java/ql/test/kotlin/library-tests/annotation_classes/PrintAst.expected b/java/ql/test/kotlin/library-tests/annotation_classes/PrintAst.expected index c457b0811dd..0ff19b747fa 100644 --- a/java/ql/test/kotlin/library-tests/annotation_classes/PrintAst.expected +++ b/java/ql/test/kotlin/library-tests/annotation_classes/PrintAst.expected @@ -108,39 +108,39 @@ def.kt: # 0| 9: [VarAccess] ElementType.TYPE_USE # 0| -1: [TypeAccess] ElementType # 5| 3: [Annotation] Target -# 0| 1: [ArrayInit] {...} -# 0| 1: [VarAccess] AnnotationTarget.CLASS -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 2: [VarAccess] AnnotationTarget.ANNOTATION_CLASS -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 3: [VarAccess] AnnotationTarget.TYPE_PARAMETER -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 4: [VarAccess] AnnotationTarget.PROPERTY -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 5: [VarAccess] AnnotationTarget.FIELD -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 6: [VarAccess] AnnotationTarget.LOCAL_VARIABLE -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 7: [VarAccess] AnnotationTarget.VALUE_PARAMETER -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 8: [VarAccess] AnnotationTarget.CONSTRUCTOR -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 9: [VarAccess] AnnotationTarget.FUNCTION -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 10: [VarAccess] AnnotationTarget.PROPERTY_GETTER -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 11: [VarAccess] AnnotationTarget.PROPERTY_SETTER -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 12: [VarAccess] AnnotationTarget.TYPE -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 13: [VarAccess] AnnotationTarget.FILE -# 0| -1: [TypeAccess] AnnotationTarget -# 0| 14: [VarAccess] AnnotationTarget.TYPEALIAS -# 0| -1: [TypeAccess] AnnotationTarget +# 5| 1: [ArrayInit] {...} +# 5| 1: [VarAccess] AnnotationTarget.CLASS +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 2: [VarAccess] AnnotationTarget.ANNOTATION_CLASS +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 3: [VarAccess] AnnotationTarget.TYPE_PARAMETER +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 4: [VarAccess] AnnotationTarget.PROPERTY +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 5: [VarAccess] AnnotationTarget.FIELD +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 6: [VarAccess] AnnotationTarget.LOCAL_VARIABLE +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 7: [VarAccess] AnnotationTarget.VALUE_PARAMETER +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 8: [VarAccess] AnnotationTarget.CONSTRUCTOR +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 9: [VarAccess] AnnotationTarget.FUNCTION +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 10: [VarAccess] AnnotationTarget.PROPERTY_GETTER +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 11: [VarAccess] AnnotationTarget.PROPERTY_SETTER +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 12: [VarAccess] AnnotationTarget.TYPE +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 13: [VarAccess] AnnotationTarget.FILE +# 5| -1: [TypeAccess] AnnotationTarget +# 5| 14: [VarAccess] AnnotationTarget.TYPEALIAS +# 5| -1: [TypeAccess] AnnotationTarget # 21| 1: [Method] a #-----| 1: (Annotations) # 21| 1: [Annotation] JvmName -# 0| 1: [StringLiteral] "a" +# 21| 1: [StringLiteral] "a" # 21| 3: [TypeAccess] int # 23| 3: [Interface] Annot1k #-----| -3: (Annotations) @@ -201,21 +201,21 @@ def.kt: # 38| 6: [Class] Z #-----| -3: (Annotations) # 38| 1: [Annotation] Annot0k -# 0| 1: [IntegerLiteral] 1 +# 38| 1: [IntegerLiteral] 1 # 39| 2: [Annotation] Annot1k # 0| 1: [IntegerLiteral] 2 # 0| 2: [StringLiteral] "ab" # 0| 3: [TypeLiteral] X.class # 0| 0: [TypeAccess] X -# 0| 4: [VarAccess] Y.B -# 0| -1: [TypeAccess] Y -# 0| 5: [ArrayInit] {...} -# 0| 1: [VarAccess] Y.C -# 0| -1: [TypeAccess] Y -# 0| 2: [VarAccess] Y.A -# 0| -1: [TypeAccess] Y -# 0| 6: [Annotation] Annot0k +# 0| 4: [Annotation] Annot0k # 0| 1: [IntegerLiteral] 1 +# 39| 5: [VarAccess] Y.B +# 39| -1: [TypeAccess] Y +# 39| 6: [ArrayInit] {...} +# 39| 1: [VarAccess] Y.C +# 39| -1: [TypeAccess] Y +# 39| 2: [VarAccess] Y.A +# 39| -1: [TypeAccess] Y # 42| 1: [Constructor] Z #-----| 1: (Annotations) # 41| 1: [Annotation] Annot0k diff --git a/java/ql/test/kotlin/library-tests/annotation_classes/classes.expected b/java/ql/test/kotlin/library-tests/annotation_classes/classes.expected index b04dd33d2e7..01f5581b73a 100644 --- a/java/ql/test/kotlin/library-tests/annotation_classes/classes.expected +++ b/java/ql/test/kotlin/library-tests/annotation_classes/classes.expected @@ -36,16 +36,16 @@ annotationValues | def.kt:0:0:0:0 | Retention | def.kt:0:0:0:0 | RetentionPolicy.RUNTIME | | def.kt:0:0:0:0 | Retention | def.kt:0:0:0:0 | RetentionPolicy.RUNTIME | | def.kt:0:0:0:0 | Target | def.kt:0:0:0:0 | {...} | -| def.kt:5:1:20:1 | Target | def.kt:0:0:0:0 | {...} | -| def.kt:21:26:21:42 | JvmName | def.kt:0:0:0:0 | "a" | +| def.kt:5:1:20:1 | Target | def.kt:5:9:5:30 | {...} | +| def.kt:21:26:21:42 | JvmName | def.kt:21:39:21:41 | "a" | | def.kt:23:1:23:8 | Annot0k | def.kt:0:0:0:0 | 0 | -| def.kt:38:1:38:17 | Annot0k | def.kt:0:0:0:0 | 1 | +| def.kt:38:1:38:17 | Annot0k | def.kt:38:16:38:16 | 1 | | def.kt:39:1:39:40 | Annot1k | def.kt:0:0:0:0 | 2 | | def.kt:39:1:39:40 | Annot1k | def.kt:0:0:0:0 | "ab" | | def.kt:39:1:39:40 | Annot1k | def.kt:0:0:0:0 | Annot0k | | def.kt:39:1:39:40 | Annot1k | def.kt:0:0:0:0 | X.class | -| def.kt:39:1:39:40 | Annot1k | def.kt:0:0:0:0 | Y.B | -| def.kt:39:1:39:40 | Annot1k | def.kt:0:0:0:0 | {...} | +| def.kt:39:1:39:40 | Annot1k | def.kt:39:14:39:16 | Y.B | +| def.kt:39:1:39:40 | Annot1k | def.kt:39:23:39:39 | {...} | | def.kt:41:5:41:12 | Annot0k | def.kt:0:0:0:0 | 0 | | def.kt:45:1:45:8 | Annot0k | def.kt:0:0:0:0 | 0 | | def.kt:46:21:46:28 | Annot0k | def.kt:0:0:0:0 | 0 | diff --git a/java/ql/test/kotlin/library-tests/enum/test.expected b/java/ql/test/kotlin/library-tests/enum/test.expected index abc7e2e87c7..2484ff2e2ba 100644 --- a/java/ql/test/kotlin/library-tests/enum/test.expected +++ b/java/ql/test/kotlin/library-tests/enum/test.expected @@ -15,6 +15,7 @@ enumConstants | describeConstable | | equals | | finalize | +| forEach | | getDeclaringClass | | hasMoreElements | | hashCode | @@ -23,8 +24,12 @@ enumConstants | noneOf | | of | | ordinal | +| parallelStream | | range | | resolveConstantDesc | +| spliterator | +| stream | +| toArray | | toString | | typeCheck | | usesEnum | diff --git a/java/ql/test/kotlin/library-tests/exprs/PrintAst.expected b/java/ql/test/kotlin/library-tests/exprs/PrintAst.expected index 78bf583ec0d..3b4cc35d4d4 100644 --- a/java/ql/test/kotlin/library-tests/exprs/PrintAst.expected +++ b/java/ql/test/kotlin/library-tests/exprs/PrintAst.expected @@ -1944,17 +1944,17 @@ exprs.kt: # 15| 1: [VarAccess] y # 16| 5: [LocalVariableDeclStmt] var ...; # 16| 1: [LocalVariableDeclExpr] i6 -# 16| 0: [LShiftExpr] ... << ... +# 16| 0: [LeftShiftExpr] ... << ... # 16| 0: [VarAccess] x # 16| 1: [VarAccess] y # 17| 6: [LocalVariableDeclStmt] var ...; # 17| 1: [LocalVariableDeclExpr] i7 -# 17| 0: [RShiftExpr] ... >> ... +# 17| 0: [RightShiftExpr] ... >> ... # 17| 0: [VarAccess] x # 17| 1: [VarAccess] y # 18| 7: [LocalVariableDeclStmt] var ...; # 18| 1: [LocalVariableDeclExpr] i8 -# 18| 0: [URShiftExpr] ... >>> ... +# 18| 0: [UnsignedRightShiftExpr] ... >>> ... # 18| 0: [VarAccess] x # 18| 1: [VarAccess] y # 19| 8: [LocalVariableDeclStmt] var ...; @@ -2236,17 +2236,17 @@ exprs.kt: # 72| 1: [VarAccess] ly # 73| 59: [LocalVariableDeclStmt] var ...; # 73| 1: [LocalVariableDeclExpr] l6 -# 73| 0: [LShiftExpr] ... << ... +# 73| 0: [LeftShiftExpr] ... << ... # 73| 0: [VarAccess] lx # 73| 1: [VarAccess] y # 74| 60: [LocalVariableDeclStmt] var ...; # 74| 1: [LocalVariableDeclExpr] l7 -# 74| 0: [RShiftExpr] ... >> ... +# 74| 0: [RightShiftExpr] ... >> ... # 74| 0: [VarAccess] lx # 74| 1: [VarAccess] y # 75| 61: [LocalVariableDeclStmt] var ...; # 75| 1: [LocalVariableDeclExpr] l8 -# 75| 0: [URShiftExpr] ... >>> ... +# 75| 0: [UnsignedRightShiftExpr] ... >>> ... # 75| 0: [VarAccess] lx # 75| 1: [VarAccess] y # 76| 62: [LocalVariableDeclStmt] var ...; diff --git a/java/ql/test/kotlin/library-tests/exprs/exprs.expected b/java/ql/test/kotlin/library-tests/exprs/exprs.expected index 5d35293eb22..07d57c444e4 100644 --- a/java/ql/test/kotlin/library-tests/exprs/exprs.expected +++ b/java/ql/test/kotlin/library-tests/exprs/exprs.expected @@ -924,15 +924,15 @@ | exprs.kt:15:18:15:18 | y | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:16:9:16:10 | i6 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:16:14:16:14 | x | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | -| exprs.kt:16:14:16:20 | ... << ... | exprs.kt:4:1:142:1 | topLevelMethod | LShiftExpr | +| exprs.kt:16:14:16:20 | ... << ... | exprs.kt:4:1:142:1 | topLevelMethod | LeftShiftExpr | | exprs.kt:16:20:16:20 | y | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:17:9:17:10 | i7 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:17:14:17:14 | x | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | -| exprs.kt:17:14:17:20 | ... >> ... | exprs.kt:4:1:142:1 | topLevelMethod | RShiftExpr | +| exprs.kt:17:14:17:20 | ... >> ... | exprs.kt:4:1:142:1 | topLevelMethod | RightShiftExpr | | exprs.kt:17:20:17:20 | y | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:18:9:18:10 | i8 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:18:14:18:14 | x | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | -| exprs.kt:18:14:18:21 | ... >>> ... | exprs.kt:4:1:142:1 | topLevelMethod | URShiftExpr | +| exprs.kt:18:14:18:21 | ... >>> ... | exprs.kt:4:1:142:1 | topLevelMethod | UnsignedRightShiftExpr | | exprs.kt:18:21:18:21 | y | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:19:9:19:10 | i9 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:19:14:19:14 | x | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | @@ -1162,15 +1162,15 @@ | exprs.kt:72:19:72:20 | ly | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:73:9:73:10 | l6 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:73:14:73:15 | lx | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | -| exprs.kt:73:14:73:21 | ... << ... | exprs.kt:4:1:142:1 | topLevelMethod | LShiftExpr | +| exprs.kt:73:14:73:21 | ... << ... | exprs.kt:4:1:142:1 | topLevelMethod | LeftShiftExpr | | exprs.kt:73:21:73:21 | y | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:74:9:74:10 | l7 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:74:14:74:15 | lx | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | -| exprs.kt:74:14:74:21 | ... >> ... | exprs.kt:4:1:142:1 | topLevelMethod | RShiftExpr | +| exprs.kt:74:14:74:21 | ... >> ... | exprs.kt:4:1:142:1 | topLevelMethod | RightShiftExpr | | exprs.kt:74:21:74:21 | y | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:75:9:75:10 | l8 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:75:14:75:15 | lx | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | -| exprs.kt:75:14:75:22 | ... >>> ... | exprs.kt:4:1:142:1 | topLevelMethod | URShiftExpr | +| exprs.kt:75:14:75:22 | ... >>> ... | exprs.kt:4:1:142:1 | topLevelMethod | UnsignedRightShiftExpr | | exprs.kt:75:22:75:22 | y | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | | exprs.kt:76:9:76:10 | l9 | exprs.kt:4:1:142:1 | topLevelMethod | LocalVariableDeclExpr | | exprs.kt:76:14:76:15 | lx | exprs.kt:4:1:142:1 | topLevelMethod | VarAccess | diff --git a/java/ql/test/kotlin/library-tests/java-lang-number-conversions/test.expected b/java/ql/test/kotlin/library-tests/java-lang-number-conversions/test.expected index 52ed7b2ccfe..993ddb13e55 100644 --- a/java/ql/test/kotlin/library-tests/java-lang-number-conversions/test.expected +++ b/java/ql/test/kotlin/library-tests/java-lang-number-conversions/test.expected @@ -36,6 +36,7 @@ | kotlin.Byte | minus | | kotlin.Byte | plus | | kotlin.Byte | rangeTo | +| kotlin.Byte | rangeUntil | | kotlin.Byte | rem | | kotlin.Byte | shortValue | | kotlin.Byte | times | diff --git a/java/ql/test/kotlin/library-tests/reflection/reflection.expected b/java/ql/test/kotlin/library-tests/reflection/reflection.expected index f2482a81ec1..d149bd24563 100644 --- a/java/ql/test/kotlin/library-tests/reflection/reflection.expected +++ b/java/ql/test/kotlin/library-tests/reflection/reflection.expected @@ -269,6 +269,11 @@ compGenerated | file:///CharRange.class:0:0:0:0 | spliterator | Forwarder for a Kotlin class inheriting an interface default method | | file:///Class2.class:0:0:0:0 | getValue | Default property accessor | | file:///Class2.class:0:0:0:0 | getValue | Default property accessor | +| file:///EnumEntries.class:0:0:0:0 | forEach | Forwarder for a Kotlin class inheriting an interface default method | +| file:///EnumEntries.class:0:0:0:0 | parallelStream | Forwarder for a Kotlin class inheriting an interface default method | +| file:///EnumEntries.class:0:0:0:0 | spliterator | Forwarder for a Kotlin class inheriting an interface default method | +| file:///EnumEntries.class:0:0:0:0 | stream | Forwarder for a Kotlin class inheriting an interface default method | +| file:///EnumEntries.class:0:0:0:0 | toArray | Forwarder for a Kotlin class inheriting an interface default method | | file:///IntProgression.class:0:0:0:0 | forEach | Forwarder for a Kotlin class inheriting an interface default method | | file:///IntProgression.class:0:0:0:0 | spliterator | Forwarder for a Kotlin class inheriting an interface default method | | file:///IntRange.class:0:0:0:0 | forEach | Forwarder for a Kotlin class inheriting an interface default method | diff --git a/java/ql/test/library-tests/constants/PrintAst.expected b/java/ql/test/library-tests/constants/PrintAst.expected index 241d837ea3c..63d59f7287e 100644 --- a/java/ql/test/library-tests/constants/PrintAst.expected +++ b/java/ql/test/library-tests/constants/PrintAst.expected @@ -376,26 +376,26 @@ constants/Values.java: # 62| 43: [LocalVariableDeclStmt] var ...; # 62| 0: [TypeAccess] int # 62| 1: [LocalVariableDeclExpr] lshift -# 62| 0: [LShiftExpr] ... << ... +# 62| 0: [LeftShiftExpr] ... << ... # 62| 0: [IntegerLiteral] 21 # 62| 1: [IntegerLiteral] 2 # 63| 44: [LocalVariableDeclStmt] var ...; # 63| 0: [TypeAccess] int # 63| 1: [LocalVariableDeclExpr] lshift_parameter -# 63| 0: [LShiftExpr] ... << ... +# 63| 0: [LeftShiftExpr] ... << ... # 63| 0: [VarAccess] notConstant # 63| 1: [VarAccess] notConstant # 65| 45: [LocalVariableDeclStmt] var ...; # 65| 0: [TypeAccess] int # 65| 1: [LocalVariableDeclExpr] rshift -# 65| 0: [RShiftExpr] ... >> ... +# 65| 0: [RightShiftExpr] ... >> ... # 65| 0: [MinusExpr] -... # 65| 0: [IntegerLiteral] 1 # 65| 1: [IntegerLiteral] 2 # 66| 46: [LocalVariableDeclStmt] var ...; # 66| 0: [TypeAccess] int # 66| 1: [LocalVariableDeclExpr] urshift -# 66| 0: [URShiftExpr] ... >>> ... +# 66| 0: [UnsignedRightShiftExpr] ... >>> ... # 66| 0: [MinusExpr] -... # 66| 0: [IntegerLiteral] 1 # 66| 1: [IntegerLiteral] 1 diff --git a/java/ql/test/library-tests/dataflow/taint/B.java b/java/ql/test/library-tests/dataflow/taint/B.java index af659283b13..5bd50862302 100644 --- a/java/ql/test/library-tests/dataflow/taint/B.java +++ b/java/ql/test/library-tests/dataflow/taint/B.java @@ -58,19 +58,19 @@ public class B { // non-whitelisted constructors don't pass taint StringWrapper herring = new StringWrapper(complex); sink(herring); - // toString does not pass taint yet + // toString does not pass taint yet String valueOfObject = String.valueOf(args); sink(valueOfObject); - + // tainted equality check with constant boolean cond = "foo" == s; sink(cond); // tainted logic with tainted operand boolean logic = cond && safe(); sink(logic); - // tainted condition - sink(concat.endsWith("I'm tainted")); + + // tainted logic = safe() || cond; sink(logic); diff --git a/java/ql/test/library-tests/dataflow/taint/test.expected b/java/ql/test/library-tests/dataflow/taint/test.expected index 8b7d85321b4..aee1744af9b 100644 --- a/java/ql/test/library-tests/dataflow/taint/test.expected +++ b/java/ql/test/library-tests/dataflow/taint/test.expected @@ -18,7 +18,6 @@ | B.java:15:21:15:27 | taint(...) | B.java:51:10:51:21 | fluentConcat | | B.java:15:21:15:27 | taint(...) | B.java:68:10:68:13 | cond | | B.java:15:21:15:27 | taint(...) | B.java:71:10:71:14 | logic | -| B.java:15:21:15:27 | taint(...) | B.java:73:10:73:39 | endsWith(...) | | B.java:15:21:15:27 | taint(...) | B.java:76:10:76:14 | logic | | B.java:15:21:15:27 | taint(...) | B.java:79:10:79:14 | logic | | B.java:15:21:15:27 | taint(...) | B.java:87:10:87:16 | trimmed | diff --git a/java/ql/test/library-tests/dataflow/taintsources/AndroidExposedObject.java b/java/ql/test/library-tests/dataflow/taintsources/AndroidExposedObject.java new file mode 100644 index 00000000000..2460781e196 --- /dev/null +++ b/java/ql/test/library-tests/dataflow/taintsources/AndroidExposedObject.java @@ -0,0 +1,11 @@ +import android.webkit.JavascriptInterface; + +public class AndroidExposedObject { + public void sink(Object o) { + } + + @JavascriptInterface + public void test(String arg) { + sink(arg); // $hasRemoteValueFlow + } +} diff --git a/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/Test.java b/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/Test.java index 77cac5ab620..f0e3926c7e9 100644 --- a/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/Test.java +++ b/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/Test.java @@ -18,7 +18,7 @@ class ExternalApiUsage { AtomicReference ref = new AtomicReference<>(); // not supported ref.set("foo"); - String.class.isAssignableFrom(Object.class); // parameter with generic type + String.class.isAssignableFrom(Object.class); // parameter with generic type, supported as a neutral model System.out.println(d); System.out.println(map); diff --git a/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/UnsupportedExternalAPIs.expected b/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/UnsupportedExternalAPIs.expected index f9dea6375e3..7bab3b2d75a 100644 --- a/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/UnsupportedExternalAPIs.expected +++ b/java/ql/test/query-tests/Telemetry/UnsupportedExternalAPIs/UnsupportedExternalAPIs.expected @@ -1,3 +1,2 @@ -| java.lang.Class#isAssignableFrom(Class) | 1 | | java.time.Duration#ofMillis(long) | 1 | | java.util.concurrent.atomic.AtomicReference#set(Object) | 1 | diff --git a/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayConstructionLocal.expected b/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayConstructionLocal.expected index 466e2b10de4..abfb68f74a5 100644 --- a/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayConstructionLocal.expected +++ b/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayConstructionLocal.expected @@ -1,14 +1,10 @@ edges | Test.java:76:27:76:60 | getProperty(...) : String | Test.java:78:37:78:48 | userProperty : String | -| Test.java:78:20:78:56 | parseInt(...) : Number | Test.java:80:31:80:34 | size | -| Test.java:78:20:78:56 | parseInt(...) : Number | Test.java:86:34:86:37 | size | | Test.java:78:37:78:48 | userProperty : String | Test.java:78:37:78:55 | trim(...) : String | -| Test.java:78:37:78:55 | trim(...) : String | Test.java:78:20:78:56 | parseInt(...) : Number | | Test.java:78:37:78:55 | trim(...) : String | Test.java:80:31:80:34 | size | | Test.java:78:37:78:55 | trim(...) : String | Test.java:86:34:86:37 | size | nodes | Test.java:76:27:76:60 | getProperty(...) : String | semmle.label | getProperty(...) : String | -| Test.java:78:20:78:56 | parseInt(...) : Number | semmle.label | parseInt(...) : Number | | Test.java:78:37:78:48 | userProperty : String | semmle.label | userProperty : String | | Test.java:78:37:78:55 | trim(...) : String | semmle.label | trim(...) : String | | Test.java:80:31:80:34 | size | semmle.label | size | diff --git a/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayIndexLocal.expected b/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayIndexLocal.expected index 6c932250e72..6e0738c8576 100644 --- a/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayIndexLocal.expected +++ b/java/ql/test/query-tests/security/CWE-129/semmle/tests/ImproperValidationOfArrayIndexLocal.expected @@ -1,12 +1,9 @@ edges | Test.java:14:27:14:60 | getProperty(...) : String | Test.java:16:38:16:49 | userProperty : String | -| Test.java:16:21:16:57 | parseInt(...) : Number | Test.java:19:34:19:38 | index | | Test.java:16:38:16:49 | userProperty : String | Test.java:16:38:16:56 | trim(...) : String | -| Test.java:16:38:16:56 | trim(...) : String | Test.java:16:21:16:57 | parseInt(...) : Number | | Test.java:16:38:16:56 | trim(...) : String | Test.java:19:34:19:38 | index | nodes | Test.java:14:27:14:60 | getProperty(...) : String | semmle.label | getProperty(...) : String | -| Test.java:16:21:16:57 | parseInt(...) : Number | semmle.label | parseInt(...) : Number | | Test.java:16:38:16:49 | userProperty : String | semmle.label | userProperty : String | | Test.java:16:38:16:56 | trim(...) : String | semmle.label | trim(...) : String | | Test.java:19:34:19:38 | index | semmle.label | index | diff --git a/java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTaintedLocal.expected b/java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTaintedLocal.expected index 188d0fafe6a..4d37fd48f49 100644 --- a/java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTaintedLocal.expected +++ b/java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTaintedLocal.expected @@ -11,19 +11,8 @@ edges | ArithmeticTainted.java:19:26:19:39 | readerBuffered : BufferedReader | ArithmeticTainted.java:19:26:19:50 | readLine(...) : String | | ArithmeticTainted.java:19:26:19:50 | readLine(...) : String | ArithmeticTainted.java:21:29:21:40 | stringNumber : String | | ArithmeticTainted.java:19:26:19:50 | readLine(...) : String | ArithmeticTainted.java:21:29:21:40 | stringNumber : String | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:32:17:32:20 | data | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:40:17:40:20 | data | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:50:17:50:20 | data | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:64:20:64:23 | data : Number | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:95:37:95:40 | data | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:118:9:118:12 | data : Number | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:119:10:119:13 | data : Number | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:120:10:120:13 | data : Number | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | ArithmeticTainted.java:121:10:121:13 | data : Number | | ArithmeticTainted.java:21:29:21:40 | stringNumber : String | ArithmeticTainted.java:21:29:21:47 | trim(...) : String | | ArithmeticTainted.java:21:29:21:40 | stringNumber : String | ArithmeticTainted.java:21:29:21:47 | trim(...) : String | -| ArithmeticTainted.java:21:29:21:47 | trim(...) : String | ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | -| ArithmeticTainted.java:21:29:21:47 | trim(...) : String | ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | | ArithmeticTainted.java:21:29:21:47 | trim(...) : String | ArithmeticTainted.java:32:17:32:20 | data | | ArithmeticTainted.java:21:29:21:47 | trim(...) : String | ArithmeticTainted.java:40:17:40:20 | data | | ArithmeticTainted.java:21:29:21:47 | trim(...) : String | ArithmeticTainted.java:50:17:50:20 | data | @@ -64,8 +53,6 @@ nodes | ArithmeticTainted.java:19:26:19:39 | readerBuffered : BufferedReader | semmle.label | readerBuffered : BufferedReader | | ArithmeticTainted.java:19:26:19:50 | readLine(...) : String | semmle.label | readLine(...) : String | | ArithmeticTainted.java:19:26:19:50 | readLine(...) : String | semmle.label | readLine(...) : String | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | semmle.label | parseInt(...) : Number | -| ArithmeticTainted.java:21:12:21:48 | parseInt(...) : Number | semmle.label | parseInt(...) : Number | | ArithmeticTainted.java:21:29:21:40 | stringNumber : String | semmle.label | stringNumber : String | | ArithmeticTainted.java:21:29:21:40 | stringNumber : String | semmle.label | stringNumber : String | | ArithmeticTainted.java:21:29:21:47 | trim(...) : String | semmle.label | trim(...) : String | diff --git a/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.expected b/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.expected new file mode 100644 index 00000000000..8116323de32 --- /dev/null +++ b/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.expected @@ -0,0 +1,10 @@ +| WebViewContentAccess.java:15:9:15:57 | setAllowContentAccess(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:38:9:38:55 | setAllowContentAccess(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:41:25:41:49 | (...)... | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:43:9:43:44 | setAllowContentAccess(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:46:25:46:41 | new WebView(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:48:9:48:44 | setAllowContentAccess(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:51:25:51:44 | getAWebView(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:53:9:53:44 | setAllowContentAccess(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:55:29:55:48 | getAWebView(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | +| WebViewContentAccess.java:57:25:57:44 | getAWebView(...) | Sensitive information may be exposed via a malicious link due to access to content:// links being allowed in this WebView. | diff --git a/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.java b/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.java new file mode 100644 index 00000000000..7dd4aa89347 --- /dev/null +++ b/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.java @@ -0,0 +1,59 @@ +package com.example.test; + +import android.app.Activity; + +import android.webkit.WebView; +import android.webkit.WebSettings; + +/** Helper class to mock a method which returns a `WebView` */ +interface WebViewGetter { + WebView getAWebView(); +} + +public class WebViewContentAccess extends Activity { + void enableContentAccess(WebView webview) { + webview.getSettings().setAllowContentAccess(true); + } + + void disableContentAccess(WebView webview) { + webview.getSettings().setAllowContentAccess(false); + } + + void configureWebViewSafe(WebView view, WebViewGetter getter) { + WebSettings settings = view.getSettings(); + + settings.setAllowContentAccess(false); + + WebView view2 = (WebView) findViewById(0); + settings = view2.getSettings(); + + settings.setAllowContentAccess(false); + + disableContentAccess(getter.getAWebView()); + } + + void configureWebViewUnsafe(WebView view1, WebViewGetter getter) { + WebSettings settings; + + view1.getSettings().setAllowContentAccess(true); + + // Cast expression + WebView view2 = (WebView) findViewById(0); + settings = view2.getSettings(); + settings.setAllowContentAccess(true); + + // Constructor + WebView view3 = new WebView(this); + settings = view3.getSettings(); + settings.setAllowContentAccess(true); + + // Method access + WebView view4 = getter.getAWebView(); + settings = view4.getSettings(); + settings.setAllowContentAccess(true); + + enableContentAccess(getter.getAWebView()); + + WebView view5 = getter.getAWebView(); + } +} diff --git a/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.qlref b/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.qlref new file mode 100644 index 00000000000..7c9eba28b6e --- /dev/null +++ b/java/ql/test/query-tests/security/CWE-200/semmle/tests/WebViewContentAccess.qlref @@ -0,0 +1 @@ +Security/CWE/CWE-200/AndroidWebViewSettingsAllowsContentAccess.ql \ No newline at end of file diff --git a/java/ql/test/query-tests/security/CWE-200/semmle/tests/options b/java/ql/test/query-tests/security/CWE-200/semmle/tests/options index 21cf6382c4e..972719b0431 100644 --- a/java/ql/test/query-tests/security/CWE-200/semmle/tests/options +++ b/java/ql/test/query-tests/security/CWE-200/semmle/tests/options @@ -1 +1 @@ -//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/apache-commons-lang3-3.7/:${testdir}/../../../../../stubs/google-android-9.0.0 \ No newline at end of file +//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/apache-commons-lang3-3.7/:${testdir}/../../../../../stubs/google-android-9.0.0 diff --git a/java/ql/test/stubs/google-android-9.0.0/android/webkit/JavascriptInterface.java b/java/ql/test/stubs/google-android-9.0.0/android/webkit/JavascriptInterface.java new file mode 100644 index 00000000000..6ef03118cdb --- /dev/null +++ b/java/ql/test/stubs/google-android-9.0.0/android/webkit/JavascriptInterface.java @@ -0,0 +1,7 @@ +package android.webkit; + +import java.lang.annotation.Annotation; + +public abstract @interface JavascriptInterface { + +} diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.qlref b/java/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.qlref deleted file mode 100644 index cb6ef7faa65..00000000000 --- a/java/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureNeutralModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureSinkModels.qlref b/java/ql/test/utils/model-generator/dataflow/CaptureSinkModels.qlref deleted file mode 100644 index c478ac760c4..00000000000 --- a/java/ql/test/utils/model-generator/dataflow/CaptureSinkModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureSinkModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureSourceModels.qlref b/java/ql/test/utils/model-generator/dataflow/CaptureSourceModels.qlref deleted file mode 100644 index 10593c28e92..00000000000 --- a/java/ql/test/utils/model-generator/dataflow/CaptureSourceModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureSourceModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.qlref b/java/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.qlref deleted file mode 100644 index 1ebf2afb19b..00000000000 --- a/java/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.qlref +++ /dev/null @@ -1 +0,0 @@ -utils/model-generator/CaptureSummaryModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.expected b/java/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.expected similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/CaptureNeutralModels.expected rename to java/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.expected diff --git a/java/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.qlref b/java/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.qlref new file mode 100644 index 00000000000..851ddc0d294 --- /dev/null +++ b/java/ql/test/utils/modelgenerator/dataflow/CaptureNeutralModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureNeutralModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureSinkModels.expected b/java/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.expected similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/CaptureSinkModels.expected rename to java/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.expected diff --git a/java/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.qlref b/java/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.qlref new file mode 100644 index 00000000000..36d2f144247 --- /dev/null +++ b/java/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureSinkModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureSourceModels.expected b/java/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.expected similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/CaptureSourceModels.expected rename to java/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.expected diff --git a/java/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.qlref b/java/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.qlref new file mode 100644 index 00000000000..6bbb499fc27 --- /dev/null +++ b/java/ql/test/utils/modelgenerator/dataflow/CaptureSourceModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureSourceModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.expected b/java/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.expected similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/CaptureSummaryModels.expected rename to java/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.expected diff --git a/java/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.qlref b/java/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.qlref new file mode 100644 index 00000000000..d751f3823f3 --- /dev/null +++ b/java/ql/test/utils/modelgenerator/dataflow/CaptureSummaryModels.qlref @@ -0,0 +1 @@ +utils/modelgenerator/CaptureSummaryModels.ql \ No newline at end of file diff --git a/java/ql/test/utils/model-generator/dataflow/p/AbstractImplOfExternalSPI.java b/java/ql/test/utils/modelgenerator/dataflow/p/AbstractImplOfExternalSPI.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/AbstractImplOfExternalSPI.java rename to java/ql/test/utils/modelgenerator/dataflow/p/AbstractImplOfExternalSPI.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/Factory.java b/java/ql/test/utils/modelgenerator/dataflow/p/Factory.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/Factory.java rename to java/ql/test/utils/modelgenerator/dataflow/p/Factory.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/FinalClass.java b/java/ql/test/utils/modelgenerator/dataflow/p/FinalClass.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/FinalClass.java rename to java/ql/test/utils/modelgenerator/dataflow/p/FinalClass.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/FluentAPI.java b/java/ql/test/utils/modelgenerator/dataflow/p/FluentAPI.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/FluentAPI.java rename to java/ql/test/utils/modelgenerator/dataflow/p/FluentAPI.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/ImmutablePojo.java b/java/ql/test/utils/modelgenerator/dataflow/p/ImmutablePojo.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/ImmutablePojo.java rename to java/ql/test/utils/modelgenerator/dataflow/p/ImmutablePojo.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/ImplOfExternalSPI.java b/java/ql/test/utils/modelgenerator/dataflow/p/ImplOfExternalSPI.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/ImplOfExternalSPI.java rename to java/ql/test/utils/modelgenerator/dataflow/p/ImplOfExternalSPI.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/InnerClasses.java b/java/ql/test/utils/modelgenerator/dataflow/p/InnerClasses.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/InnerClasses.java rename to java/ql/test/utils/modelgenerator/dataflow/p/InnerClasses.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/InnerHolder.java b/java/ql/test/utils/modelgenerator/dataflow/p/InnerHolder.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/InnerHolder.java rename to java/ql/test/utils/modelgenerator/dataflow/p/InnerHolder.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/Joiner.java b/java/ql/test/utils/modelgenerator/dataflow/p/Joiner.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/Joiner.java rename to java/ql/test/utils/modelgenerator/dataflow/p/Joiner.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/MultipleImpls.java b/java/ql/test/utils/modelgenerator/dataflow/p/MultipleImpls.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/MultipleImpls.java rename to java/ql/test/utils/modelgenerator/dataflow/p/MultipleImpls.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/ParamFlow.java b/java/ql/test/utils/modelgenerator/dataflow/p/ParamFlow.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/ParamFlow.java rename to java/ql/test/utils/modelgenerator/dataflow/p/ParamFlow.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/Pojo.java b/java/ql/test/utils/modelgenerator/dataflow/p/Pojo.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/Pojo.java rename to java/ql/test/utils/modelgenerator/dataflow/p/Pojo.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/PrivateFlowViaPublicInterface.java b/java/ql/test/utils/modelgenerator/dataflow/p/PrivateFlowViaPublicInterface.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/PrivateFlowViaPublicInterface.java rename to java/ql/test/utils/modelgenerator/dataflow/p/PrivateFlowViaPublicInterface.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/Sinks.java b/java/ql/test/utils/modelgenerator/dataflow/p/Sinks.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/Sinks.java rename to java/ql/test/utils/modelgenerator/dataflow/p/Sinks.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/SomeEnum.java b/java/ql/test/utils/modelgenerator/dataflow/p/SomeEnum.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/SomeEnum.java rename to java/ql/test/utils/modelgenerator/dataflow/p/SomeEnum.java diff --git a/java/ql/test/utils/model-generator/dataflow/p/Sources.java b/java/ql/test/utils/modelgenerator/dataflow/p/Sources.java similarity index 100% rename from java/ql/test/utils/model-generator/dataflow/p/Sources.java rename to java/ql/test/utils/modelgenerator/dataflow/p/Sources.java diff --git a/java/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.expected b/java/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.expected similarity index 100% rename from java/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.expected rename to java/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.expected diff --git a/java/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.ql b/java/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.ql similarity index 100% rename from java/ql/test/utils/model-generator/typebasedflow/CaptureTypeBasedSummaryModels.ql rename to java/ql/test/utils/modelgenerator/typebasedflow/CaptureTypeBasedSummaryModels.ql diff --git a/java/ql/test/utils/model-generator/typebasedflow/p/MyFunction.java b/java/ql/test/utils/modelgenerator/typebasedflow/p/MyFunction.java similarity index 100% rename from java/ql/test/utils/model-generator/typebasedflow/p/MyFunction.java rename to java/ql/test/utils/modelgenerator/typebasedflow/p/MyFunction.java diff --git a/java/ql/test/utils/model-generator/typebasedflow/p/Stream.java b/java/ql/test/utils/modelgenerator/typebasedflow/p/Stream.java similarity index 100% rename from java/ql/test/utils/model-generator/typebasedflow/p/Stream.java rename to java/ql/test/utils/modelgenerator/typebasedflow/p/Stream.java diff --git a/java/ql/test/utils/model-generator/typebasedflow/p/TypeBasedCollection.java b/java/ql/test/utils/modelgenerator/typebasedflow/p/TypeBasedCollection.java similarity index 100% rename from java/ql/test/utils/model-generator/typebasedflow/p/TypeBasedCollection.java rename to java/ql/test/utils/modelgenerator/typebasedflow/p/TypeBasedCollection.java diff --git a/java/ql/test/utils/model-generator/typebasedflow/p/TypeBasedComplex.java b/java/ql/test/utils/modelgenerator/typebasedflow/p/TypeBasedComplex.java similarity index 100% rename from java/ql/test/utils/model-generator/typebasedflow/p/TypeBasedComplex.java rename to java/ql/test/utils/modelgenerator/typebasedflow/p/TypeBasedComplex.java diff --git a/java/ql/test/utils/model-generator/typebasedflow/p/TypeBasedSimple.java b/java/ql/test/utils/modelgenerator/typebasedflow/p/TypeBasedSimple.java similarity index 100% rename from java/ql/test/utils/model-generator/typebasedflow/p/TypeBasedSimple.java rename to java/ql/test/utils/modelgenerator/typebasedflow/p/TypeBasedSimple.java diff --git a/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointCharacteristics.qll b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointCharacteristics.qll index e95b2785ceb..160c81f8acd 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointCharacteristics.qll +++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointCharacteristics.qll @@ -278,6 +278,28 @@ private class NosqlInjectionSinkCharacteristic extends EndpointCharacteristic { } } +/** + * Endpoints identified as "ShellCommandInjectionFromEnvironmentSink" by the standard JavaScript libraries are + * ShellCommandInjectionFromEnvironment sinks with maximal confidence. + */ +private class ShellCommandInjectionFromEnvironmentSinkCharacteristic extends EndpointCharacteristic { + ShellCommandInjectionFromEnvironmentSinkCharacteristic() { + this = "ShellCommandInjectionFromEnvironmentSink" + } + + override predicate appliesToEndpoint(DataFlow::Node n) { + n instanceof ShellCommandInjectionFromEnvironment::Sink + } + + override predicate hasImplications( + EndpointType endpointClass, boolean isPositiveIndicator, float confidence + ) { + endpointClass instanceof ShellCommandInjectionFromEnvironmentSinkType and + isPositiveIndicator = true and + confidence = maximalConfidence() + } +} + /* * Characteristics that are indicative of not being a sink of any type, and have historically been used to select * negative samples for training. diff --git a/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointTypes.qll b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointTypes.qll index d2cc37b1b33..ade9f9ed99d 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointTypes.qll +++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/EndpointTypes.qll @@ -10,7 +10,8 @@ newtype TEndpointType = TXssSinkType() or TNosqlInjectionSinkType() or TSqlInjectionSinkType() or - TTaintedPathSinkType() + TTaintedPathSinkType() or + TShellCommandInjectionFromEnvironmentSinkType() /** A class that can be predicted by endpoint scoring models. */ abstract class EndpointType extends TEndpointType { @@ -60,3 +61,11 @@ class TaintedPathSinkType extends EndpointType, TTaintedPathSinkType { override int getEncoding() { result = 4 } } + +/** The `ShellCommandInjectionFromEnvironmentSink` class that can be predicted by endpoint scoring models. */ +class ShellCommandInjectionFromEnvironmentSinkType extends EndpointType, + TShellCommandInjectionFromEnvironmentSinkType { + override string getDescription() { result = "ShellCommandInjectionFromEnvironmentSink" } + + override int getEncoding() { result = 5 } +} diff --git a/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/ShellCommandInjectionFromEnvironmentATM.qll b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/ShellCommandInjectionFromEnvironmentATM.qll new file mode 100644 index 00000000000..06ae4dc7239 --- /dev/null +++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/ShellCommandInjectionFromEnvironmentATM.qll @@ -0,0 +1,30 @@ +/** + * For internal use only. + * + * A taint-tracking configuration for reasoning about command-injection + * vulnerabilities. + * Defines shared code used by the ShellCommandInjectionFromEnvironment boosted query. + */ + +private import semmle.javascript.heuristics.SyntacticHeuristics +private import semmle.javascript.security.dataflow.ShellCommandInjectionFromEnvironmentCustomizations::ShellCommandInjectionFromEnvironment as ShellCommandInjectionFromEnvironment +import AdaptiveThreatModeling + +class ShellCommandInjectionFromEnvironmentAtmConfig extends AtmConfig { + ShellCommandInjectionFromEnvironmentAtmConfig() { + this = "ShellCommandInjectionFromEnvironmentAtmConfig" + } + + override predicate isKnownSource(DataFlow::Node source) { + source instanceof ShellCommandInjectionFromEnvironment::Source + } + + override EndpointType getASinkEndpointType() { + result instanceof ShellCommandInjectionFromEnvironmentSinkType + } + + override predicate isSanitizer(DataFlow::Node node) { + super.isSanitizer(node) or + node instanceof ShellCommandInjectionFromEnvironment::Sanitizer + } +} diff --git a/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml b/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml index 9e722f81eae..9ceece5aba9 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml +++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml @@ -1,6 +1,6 @@ name: codeql/javascript-experimental-atm-lib description: CodeQL libraries for the experimental ML-powered queries -version: 0.4.5 +version: 0.4.6 extractor: javascript library: true groups: diff --git a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/DebugResultInclusion.ql b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/DebugResultInclusion.ql index ac2f2f1d817..efccae3364d 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/DebugResultInclusion.ql +++ b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/DebugResultInclusion.ql @@ -17,6 +17,7 @@ private import experimental.adaptivethreatmodeling.SqlInjectionATM as SqlInjecti private import experimental.adaptivethreatmodeling.TaintedPathATM as TaintedPathAtm private import experimental.adaptivethreatmodeling.XssATM as XssAtm private import experimental.adaptivethreatmodeling.XssThroughDomATM as XssThroughDomAtm +private import experimental.adaptivethreatmodeling.ShellCommandInjectionFromEnvironmentATM as ShellCommandInjectionFromEnvironmentAtm string getAReasonSinkExcluded(DataFlow::Node sinkCandidate, Query query) { query instanceof NosqlInjectionQuery and @@ -33,6 +34,11 @@ string getAReasonSinkExcluded(DataFlow::Node sinkCandidate, Query query) { or query instanceof XssThroughDomQuery and result = any(XssThroughDomAtm::XssThroughDomAtmConfig cfg).getAReasonSinkExcluded(sinkCandidate) + or + query instanceof ShellCommandInjectionFromEnvironmentQuery and + result = + any(ShellCommandInjectionFromEnvironmentAtm::ShellCommandInjectionFromEnvironmentAtmConfig cfg) + .getAReasonSinkExcluded(sinkCandidate) } pragma[inline] diff --git a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointDataTraining.qll b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointDataTraining.qll index 7773e4b1e04..852bb65df94 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointDataTraining.qll +++ b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointDataTraining.qll @@ -15,6 +15,7 @@ private import experimental.adaptivethreatmodeling.SqlInjectionATM as SqlInjecti private import experimental.adaptivethreatmodeling.TaintedPathATM as TaintedPathAtm private import experimental.adaptivethreatmodeling.XssATM as XssAtm private import experimental.adaptivethreatmodeling.XssThroughDomATM as XssThroughDomAtm +private import experimental.adaptivethreatmodeling.ShellCommandInjectionFromEnvironmentATM as ShellCommandInjectionFromEnvironmentAtm /** * Gets the set of featureName-featureValue pairs for each endpoint in the training set. @@ -217,6 +218,10 @@ DataFlow::Configuration getDataFlowCfg(Query query) { query instanceof XssQuery and result instanceof XssAtm::DomBasedXssAtmConfig or query instanceof XssThroughDomQuery and result instanceof XssThroughDomAtm::XssThroughDomAtmConfig + or + query instanceof ShellCommandInjectionFromEnvironmentQuery and + result instanceof + ShellCommandInjectionFromEnvironmentAtm::ShellCommandInjectionFromEnvironmentAtmConfig } // TODO: Delete this once we are no longer surfacing `hasFlowFromSource`. diff --git a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql index 57c536eac12..1fb6441e1a9 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql +++ b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql @@ -9,6 +9,7 @@ import experimental.adaptivethreatmodeling.NosqlInjectionATM as NosqlInjectionAt import experimental.adaptivethreatmodeling.TaintedPathATM as TaintedPathAtm import experimental.adaptivethreatmodeling.XssATM as XssAtm import experimental.adaptivethreatmodeling.XssThroughDomATM as XssThroughDomAtm +import experimental.adaptivethreatmodeling.ShellCommandInjectionFromEnvironmentATM as ShellCommandInjectionFromEnvironmentAtm import experimental.adaptivethreatmodeling.AdaptiveThreatModeling from string queryName, AtmConfig c, EndpointType e @@ -26,6 +27,10 @@ where queryName = "Xss" and c instanceof XssAtm::DomBasedXssAtmConfig or queryName = "XssThroughDom" and c instanceof XssThroughDomAtm::XssThroughDomAtmConfig + or + queryName = "ShellCommandInjectionFromEnvironment" and + c instanceof + ShellCommandInjectionFromEnvironmentAtm::ShellCommandInjectionFromEnvironmentAtmConfig ) and e = c.getASinkEndpointType() select queryName, e.getEncoding() as label diff --git a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/Queries.qll b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/Queries.qll index a75e01b99cd..a84872c4ee4 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/Queries.qll +++ b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/Queries.qll @@ -9,7 +9,8 @@ newtype TQuery = TSqlInjectionQuery() or TTaintedPathQuery() or TXssQuery() or - TXssThroughDomQuery() + TXssThroughDomQuery() or + TShellCommandInjectionFromEnvironmentQuery() abstract class Query extends TQuery { abstract string getName(); @@ -36,3 +37,8 @@ class XssQuery extends Query, TXssQuery { class XssThroughDomQuery extends Query, TXssThroughDomQuery { override string getName() { result = "XssThroughDom" } } + +class ShellCommandInjectionFromEnvironmentQuery extends Query, + TShellCommandInjectionFromEnvironmentQuery { + override string getName() { result = "ShellCommandInjectionFromEnvironment" } +} diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/ShellCommandInjectionFromEnvironmentATM.md b/javascript/ql/experimental/adaptivethreatmodeling/src/ShellCommandInjectionFromEnvironmentATM.md new file mode 100644 index 00000000000..8f38b8701a9 --- /dev/null +++ b/javascript/ql/experimental/adaptivethreatmodeling/src/ShellCommandInjectionFromEnvironmentATM.md @@ -0,0 +1,75 @@ + +# Shell command built from environment values (experimental) + +Dynamically constructing a shell command with values from the +local environment, such as file paths, may inadvertently +change the meaning of the shell command. + +Such changes can occur when an environment value contains +characters that the shell interprets in a special way, for instance +quotes and spaces. + +This can result in the shell command misbehaving, or even +allowing a malicious user to execute arbitrary commands on the system. + +Note: This CodeQL query is an experimental query. Experimental queries generate alerts using machine learning. They might include more false positives but they will improve over time. + +## Recommendation + +If possible, use hard-coded string literals to specify the +shell command to run, and provide the dynamic arguments to the shell +command separately to avoid interpretation by the shell. + +Alternatively, if the shell command must be constructed +dynamically, then add code to ensure that special characters in +environment values do not alter the shell command unexpectedly. + +## Example + +The following example shows a dynamically constructed shell +command that recursively removes a temporary directory that is located +next to the currently executing JavaScript file. Such utilities are +often found in custom build scripts. + +```javascript +var cp = require("child_process"), + path = require("path"); +function cleanupTemp() { + let cmd = "rm -rf " + path.join(__dirname, "temp"); + cp.execSync(cmd); // BAD +} +``` + +The shell command will, however, fail to work as intended if the +absolute path of the script's directory contains spaces. In that +case, the shell command will interpret the absolute path as multiple +paths, instead of a single path. + +For instance, if the absolute path of +the temporary directory is "`/home/username/important project/temp`", then the shell command will recursively delete +`"/home/username/important"` and `"project/temp"`, +where the latter path gets resolved relative to the working directory +of the JavaScript process. + +Even worse, although less likely, a malicious user could +provide the path `"/home/username/; cat /etc/passwd #/important +project/temp"` in order to execute the command `"cat +/etc/passwd"`. + +To avoid such potentially catastrophic behaviors, provide the +directory as an argument that does not get interpreted by a +shell: + +```javascript +var cp = require("child_process"), + path = require("path"); +function cleanupTemp() { + let cmd = "rm", + args = ["-rf", path.join(__dirname, "temp")]; + cp.execFileSync(cmd, args); // GOOD +} +``` + + +## References +* OWASP: [Command Injection](https://www.owasp.org/index.php/Command_Injection) diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/ShellCommandInjectionFromEnvironmentATM.ql b/javascript/ql/experimental/adaptivethreatmodeling/src/ShellCommandInjectionFromEnvironmentATM.ql new file mode 100644 index 00000000000..e2de0be9238 --- /dev/null +++ b/javascript/ql/experimental/adaptivethreatmodeling/src/ShellCommandInjectionFromEnvironmentATM.ql @@ -0,0 +1,29 @@ +/** + * For internal use only. + * + * @name Shell command built from environment values + * @description Building a shell command string with values from the enclosing + * environment may cause subtle bugs or vulnerabilities. + * @kind path-problem + * @scored + * @problem.severity warning + * @security-severity 6.3 + * @precision high + * @id js/ml-powered/shell-command-injection-from-environment + * @tags experimental security + * correctness + * security + * external/cwe/cwe-078 + * external/cwe/cwe-088 + */ + +import javascript +import experimental.adaptivethreatmodeling.ShellCommandInjectionFromEnvironmentATM +import ATM::ResultsInfo +import DataFlow::PathGraph + +from AtmConfig cfg, DataFlow::PathNode source, DataFlow::PathNode sink, float score +where cfg.hasBoostedFlowPath(source, sink, score) +select sink.getNode(), source, sink, + "(Experimental) This shell command depends on $@. Identified using machine learning.", + source.getNode(), "an uncontrolled value", score diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/XssThroughDomATM.md b/javascript/ql/experimental/adaptivethreatmodeling/src/XssThroughDomATM.md new file mode 100644 index 00000000000..ecbcc7cfb88 --- /dev/null +++ b/javascript/ql/experimental/adaptivethreatmodeling/src/XssThroughDomATM.md @@ -0,0 +1,48 @@ +# DOM text reinterpreted as HTML (experimental) + +Extracting text from a DOM node and interpreting it as HTML can lead to a cross-site scripting vulnerability. + +A webpage with this vulnerability reads text from the DOM, and afterwards adds the text as HTML to the DOM. Using text from the DOM as HTML effectively unescapes the text, and thereby invalidates any escaping done on the text. If an attacker is able to control the safe sanitized text, then this vulnerability can be exploited to perform a cross-site scripting attack. + +Note: This CodeQL query is an experimental query. Experimental queries generate alerts using machine learning. They might include more false positives but they will improve over time. + +## Recommendation + +To guard against cross-site scripting, consider using contextual output encoding/escaping before writing text to the page, or one of the other solutions that are mentioned in the References section below. + +## Example + +The following example shows a webpage using a `data-target` attribute +to select and manipulate a DOM element using the JQuery library. In the example, the +`data-target` attribute is read into the `target` variable, and the +`$` function is then supposed to use the `target` variable as a CSS +selector to determine which element should be manipulated. + +```javascript +$("button").click(function () { + var target = $(this).attr("data-target"); + $(target).hide(); +}); +``` + +However, if an attacker can control the `data-target` attribute, +then the value of `target` can be used to cause the `$` function +to execute arbitrary JavaScript. + +The above vulnerability can be fixed by using `$.find` instead of `$`. +The `$.find` function will only interpret `target` as a CSS selector +and never as HTML, thereby preventing an XSS attack. + +```javascript +$("button").click(function () { + var target = $(this).attr("data-target"); + $.find(target).hide(); +}); +``` + +## References +* OWASP: [DOM based XSS Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html) +* OWASP: [(Cross Site Scripting) Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html) +* OWASP [DOM Based XSS](https://owasp.org/www-community/attacks/DOM_Based_XSS) +* OWASP [Types of Cross-Site Scripting](https://owasp.org/www-community/Types_of_Cross-Site_Scripting) +* Wikipedia: [Cross-site scripting](http://en.wikipedia.org/wiki/Cross-site_scripting) diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml b/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml index 58fe9d1197d..b4329d9a0c2 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml +++ b/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/javascript-experimental-atm-queries description: Experimental ML-powered queries for JavaScript language: javascript -version: 0.4.5 +version: 0.4.6 suites: codeql-suites defaultSuiteFile: codeql-suites/javascript-atm-code-scanning.qls groups: diff --git a/javascript/ql/experimental/adaptivethreatmodeling/test/endpoint_large_scale/EndpointFeatures.expected b/javascript/ql/experimental/adaptivethreatmodeling/test/endpoint_large_scale/EndpointFeatures.expected index a8dbf544fdd..8bcec723886 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/test/endpoint_large_scale/EndpointFeatures.expected +++ b/javascript/ql/experimental/adaptivethreatmodeling/test/endpoint_large_scale/EndpointFeatures.expected @@ -1,14 +1,203 @@ tokenFeatures +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:1:1:0 | this | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:1:1:0 | this | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:16:1:24 | "mongodb" | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:16:1:24 | "mongodb" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:16:1:24 | "mongodb" | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:8 | find | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:8 | find | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:8 | find | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | 'arguments' object of method find of interface Collection | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | 'arguments' object of method find of interface Collection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | 'arguments' object of method find of interface Collection | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | exceptional return of method find of interface Collection | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | exceptional return of method find of interface Collection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | exceptional return of method find of interface Collection | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | (query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | return of method find of interface Collection | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | return of method find of interface Collection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | return of method find of interface Collection | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:10:3:14 | query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:10:3:14 | query | contextSurroundingFunctionParameters | (query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:10:3:14 | query | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:6:16:6:25 | "mongoose" | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:6:16:6:25 | "mongoose" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:6:16:6:25 | "mongoose" | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:8 | find | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:8 | find | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:8 | find | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | 'arguments' object of method find of interface Model | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | 'arguments' object of method find of interface Model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | 'arguments' object of method find of interface Model | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | exceptional return of method find of interface Model | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | exceptional return of method find of interface Model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | exceptional return of method find of interface Model | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | (query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | return of method find of interface Model | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | return of method find of interface Model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | return of method find of interface Model | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:10:8:14 | query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:10:8:14 | query | contextSurroundingFunctionParameters | (query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:10:8:14 | query | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:8 | find | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:8 | find | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:8 | find | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | 'arguments' object of method find of interface Query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | 'arguments' object of method find of interface Query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | 'arguments' object of method find of interface Query | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | exceptional return of method find of interface Query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | exceptional return of method find of interface Query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | exceptional return of method find of interface Query | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | (query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | return of method find of interface Query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | return of method find of interface Query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | return of method find of interface Query | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:10:11:14 | query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:10:11:14 | query | contextSurroundingFunctionParameters | (query) | +| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:10:11:14 | query | fileImports | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:1:1:0 | this | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:1:1:0 | this | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:8:1:19 | * as mongodb | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:8:1:19 | * as mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:8:1:19 | * as mongodb | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:13:1:19 | mongodb | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:13:1:19 | mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:13:1:19 | mongodb | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:26:1:34 | "mongodb" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:26:1:34 | "mongodb" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:26:1:34 | "mongodb" | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:13 | express | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:13 | express | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express ... as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express ... as any | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express ... as any | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:23 | require | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:23 | require | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | exceptional return of require("express") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | exceptional return of require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | exceptional return of require("express") | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | require("express") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | require("express") | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:41 | require ... as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:41 | require ... as any | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:41 | require ... as any | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:16 | bodyParser | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:16 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:16 | bodyParser | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyPar ... as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyPar ... as any | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyPar ... as any | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyParser | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyParser | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:26 | require | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:26 | require | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | exceptional return of require ... arser") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | exceptional return of require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | exceptional return of require ... arser") | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | require ... arser") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | require ... arser") | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:48 | require ... as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:48 | require ... as any | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:48 | require ... as any | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | 'arguments' object of function getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | 'arguments' object of function getCollection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | 'arguments' object of function getCollection | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | declare ... ection; | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | declare ... ection; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | declare ... ection; | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | exceptional return of function getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | exceptional return of function getCollection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | exceptional return of function getCollection | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | return of function getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | return of function getCollection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | return of function getCollection | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:18:6:30 | getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:18:6:30 | getCollection | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:18:6:30 | getCollection | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:7 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:7 | app | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app = express() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app = express() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:17 | express | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:17 | express | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | exceptional return of express() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | express() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | express() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:3 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:3 | app | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:7 | app.use | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:7 | app.use | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | app.use ... json()) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | app.use ... json()) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | exceptional return of app.use ... json()) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | exceptional return of app.use ... json()) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:5:10:7 | use | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:5:10:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:5:10:7 | use | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:18 | bodyParser | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:18 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:18 | bodyParser | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:23 | bodyParser.json | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:23 | bodyParser.json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:23 | bodyParser.json | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | calleeImports | express | @@ -16,6 +205,27 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | receiverName | app | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | exceptional return of bodyParser.json() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | exceptional return of bodyParser.json() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | exceptional return of bodyParser.json() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:20:10:23 | json | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:20:10:23 | json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:20:10:23 | json | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:3 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:3 | app | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:8 | app.post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:8 | app.post | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:5:12:8 | post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:5:12:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:5:12:8 | post | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | calleeImports | express | @@ -23,6 +233,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | receiverName | app | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -30,6 +245,81 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | CalleeFlexibleAccessPath | JSON.parse | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | @@ -38,6 +328,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | CalleeFlexibleAccessPath | getCollection().find | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | @@ -45,6 +380,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | CalleeFlexibleAccessPath | getCollection().find | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | InputAccessPathFromCallee | 0.id | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | InputArgumentIndex | 0 | @@ -54,6 +404,60 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:8:17:20 | * as mongoose | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:8:17:20 | * as mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:8:17:20 | * as mongoose | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:13:17:20 | mongoose | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:13:17:20 | mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:13:17:20 | mongoose | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:27:17:36 | "mongoose" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:27:17:36 | "mongoose" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:27:17:36 | "mongoose" | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | 'arguments' object of function getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | 'arguments' object of function getMongooseModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | 'arguments' object of function getMongooseModel | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | declare ... .Model; | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | declare ... .Model; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | declare ... .Model; | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | exceptional return of function getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | exceptional return of function getMongooseModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | exceptional return of function getMongooseModel | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | return of function getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | return of function getMongooseModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | return of function getMongooseModel | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:18:18:33 | getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:18:18:33 | getMongooseModel | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:18:18:33 | getMongooseModel | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | 'arguments' object of function getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | 'arguments' object of function getMongooseQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | 'arguments' object of function getMongooseQuery | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | declare ... .Query; | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | declare ... .Query; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | declare ... .Query; | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | exceptional return of function getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | exceptional return of function getMongooseQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | exceptional return of function getMongooseQuery | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | return of function getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | return of function getMongooseQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | return of function getMongooseQuery | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:18:19:33 | getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:18:19:33 | getMongooseQuery | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:18:19:33 | getMongooseQuery | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:3 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:3 | app | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:8 | app.post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:8 | app.post | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:5:20:8 | post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:5:20:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:5:20:8 | post | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | calleeImports | express | @@ -61,6 +465,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | receiverName | app | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -68,6 +477,81 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | CalleeFlexibleAccessPath | JSON.parse | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | @@ -76,6 +560,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | CalleeFlexibleAccessPath | getMongooseModel().find | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | @@ -83,6 +612,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | CalleeFlexibleAccessPath | getMongooseModel().find | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | InputAccessPathFromCallee | 0.id | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | InputArgumentIndex | 0 | @@ -92,6 +636,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | CalleeFlexibleAccessPath | getMongooseQuery().find | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | @@ -99,6 +678,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | fileImports | body-parser express mongodb mongoose | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | CalleeFlexibleAccessPath | getMongooseQuery().find | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | InputAccessPathFromCallee | 0.id | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | InputArgumentIndex | 0 | @@ -108,12 +702,205 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | fileImports | body-parser express mongodb mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:0 | this | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:0 | this | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | dbClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | dbClient | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | module | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | module | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | require | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | require | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClien ... oClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClien ... oClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClien ... oClient | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClient | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:22 | require | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:22 | require | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | exceptional return of require("mongodb") | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | exceptional return of require("mongodb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | exceptional return of require("mongodb") | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | require("mongodb") | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | require("mongodb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | require("mongodb") | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:45 | require ... oClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:45 | require ... oClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:45 | require ... oClient | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | contextFunctionInterfaces | connect(fn)\ndb() | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:35:1:45 | MongoClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:35:1:45 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:35:1:45 | MongoClient | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db = null | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db = null | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db = null | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:8:2:11 | null | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:8:2:11 | null | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:8:2:11 | null | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:6 | module | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:6 | module | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:14 | module.exports | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:14 | module.exports | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:13:1 | module. ... ;\\n }\\n} | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:13:1 | module. ... ;\\n }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:13:1 | module. ... ;\\n }\\n} | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:8:3:14 | exports | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:8:3:14 | exports | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n db: ... ;\\n }\\n} | assignedToPropName | exports | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n db: ... ;\\n }\\n} | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n db: ... ;\\n }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n db: ... ;\\n }\\n} | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:4:4 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:4:4 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:4:4 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: () ... db;\\n } | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: () ... db;\\n } | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: () ... db;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: () ... db;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: () ... db;\\n } | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: () ... db;\\n } | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | enclosingFunctionBody | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | enclosingFunctionName | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | enclosingFunctionBody | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | enclosingFunctionName | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n } | assignedToPropName | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n } | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n } | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | enclosingFunctionBody | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | enclosingFunctionName | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | enclosingFunctionBody | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | enclosingFunctionName | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | enclosingFunctionBody | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | enclosingFunctionName | db | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:7:9 | connect | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:7:9 | connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:7:9 | connect | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n } | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n } | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n } | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n } | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n } | assignedToPropName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n } | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n } | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n } | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n }) | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n }) | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n }) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n }) | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n }) | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n }) | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n }) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n }) | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n }) | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | CalleeFlexibleAccessPath | dbClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | calleeImports | mongodb | @@ -123,6 +910,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | enclosingFunctionName | connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | receiverName | dbClient | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | contextSurroundingFunctionParameters | (fn) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | CalleeFlexibleAccessPath | dbClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | calleeImports | mongodb | @@ -132,6 +929,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | enclosingFunctionName | connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | receiverName | dbClient | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n } | CalleeFlexibleAccessPath | dbClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n } | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n } | calleeImports | mongodb | @@ -141,6 +948,86 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n } | enclosingFunctionName | connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n } | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n } | receiverName | dbClient | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | CalleeFlexibleAccessPath | client.db | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | contextFunctionInterfaces | connect(fn)\ndb() | @@ -149,6 +1036,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | enclosingFunctionName | connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | contextFunctionInterfaces | connect(fn)\ndb() | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | contextSurroundingFunctionParameters | (fn)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | enclosingFunctionName | connect | +| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | fileImports | mongodb | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | CalleeFlexibleAccessPath | fn | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | contextFunctionInterfaces | connect(fn)\ndb() | @@ -156,12 +1068,133 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | enclosingFunctionName | connect | | autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | fileImports | mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:0 | this | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:0 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | github | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | github | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit2 | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit2 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | nativeGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | nativeGraphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | require | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | root | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | root | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | schema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | withCustomRequest | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | withCustomRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:11 | express | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:11 | express | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express ... press') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:21 | require | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:21 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | exceptional return of require('express') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | require('express') | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | require('express') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | contextFunctionInterfaces | hello() | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:7 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:7 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app = express() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app = express() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:17 | express | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:17 | express | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | exceptional return of express() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | exceptional return of express() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | express() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | express() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:1:4:40 | import ... /core"; | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:1:4:40 | import ... /core"; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:1:4:40 | import ... /core"; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:25:4:39 | "@octokit/core" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:25:4:39 | "@octokit/core" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:25:4:39 | "@octokit/core" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit = new Octokit() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit = new Octokit() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit = new Octokit() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | exceptional return of new Octokit() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | exceptional return of new Octokit() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | exceptional return of new Octokit() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | new Octokit() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | new Octokit() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | new Octokit() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:17:5:23 | Octokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:17:5:23 | Octokit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:17:5:23 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:3 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:7 | app.get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | app.get ... `);\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | app.get ... `);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | app.get ... `);\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | exceptional return of app.get ... `);\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | exceptional return of app.get ... `);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | exceptional return of app.get ... `);\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:5:7:7 | get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:5:7:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:5:7:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | calleeImports | express | @@ -169,6 +1202,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ... `);\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ... `);\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ... `);\\n} | calleeImports | express | @@ -176,6 +1229,101 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ... `);\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ... `);\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ... `);\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n `) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n `) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n `) | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n `) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n `) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n `) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n `) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n `) | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n `) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n `) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n `) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n `) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n `) | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n `) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n `) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n ... }\\n ` | CalleeFlexibleAccessPath | kit.graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n ... }\\n ` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n ... }\\n ` | calleeImports | @octokit/core | @@ -185,6 +1333,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n ... }\\n ` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n ... }\\n ` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n ... }\\n ` | receiverName | kit | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n ... name: " | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n ... name: " | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n ... name: " | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n ... name: " | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n ... name: " | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n ... name: " | stringConcatenatedWith | -endpoint- id + '") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n ' | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | stringConcatenatedWith | '\n query {\n repository(owner: "github", name: "' -endpoint- '") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n ' | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n ... }\\n | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n ... }\\n | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n ... }\\n | enclosingFunctionBody | req res id req params id response kit graphql \n query {\n repository(owner: "github", name: " id ") {\n object(expression: "master:foo") {\n ... on Blob {\n text\n }\n }\n }\n }\n | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n ... }\\n | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n ... }\\n | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n ... }\\n | stringConcatenatedWith | '\n query {\n repository(owner: "github", name: "' + id -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:1:23:62 | import ... aphql"; | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:1:23:62 | import ... aphql"; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:1:23:62 | import ... aphql"; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:44:23:61 | "@octokit/graphql" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:44:23:61 | "@octokit/graphql" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:44:23:61 | "@octokit/graphql" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:3 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:7 | app.get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:5:25:7 | get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:5:25:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:5:25:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | calleeImports | express | @@ -192,6 +1405,36 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | calleeImports | express | @@ -199,6 +1442,91 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | CalleeFlexibleAccessPath | graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | calleeImports | @octokit/graphql | @@ -207,6 +1535,48 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | CalleeFlexibleAccessPath | withCustomRequest | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | calleeImports | @octokit/graphql | @@ -215,6 +1585,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | CalleeFlexibleAccessPath | myGraphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | calleeImports | @octokit/graphql | @@ -223,6 +1618,58 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | CalleeFlexibleAccessPath | graphql.defaults | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | calleeImports | @octokit/graphql | @@ -232,6 +1679,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | receiverName | graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | CalleeFlexibleAccessPath | withDefaults | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | calleeImports | @octokit/graphql | @@ -240,12 +1702,70 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | enclosingFunctionBody | req res id req params id response graphql foo id myGraphql withCustomRequest request response myGraphql foo id withDefaults graphql defaults withDefaults foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:17 | { request } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:17 | { request } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:17 | { request } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | { reque ... quest") | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | { reque ... quest") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | { reque ... quest") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:27 | require | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:27 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | exceptional return of require ... quest") | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | exceptional return of require ... quest") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | exceptional return of require ... quest") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | require ... quest") | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | require ... quest") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | require ... quest") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | contextFunctionInterfaces | hello() | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:3 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:7 | app.get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:5:38:7 | get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:5:38:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:5:38:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | calleeImports | express | @@ -253,6 +1773,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | calleeImports | express | @@ -260,6 +1795,101 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result ... \\n }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | CalleeFlexibleAccessPath | request | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | calleeImports | @octokit/request | @@ -276,6 +1906,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n ... K\\n } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n ... K\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n ... K\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ... } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n ... } | CalleeFlexibleAccessPath | request | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n ... } | InputAccessPathFromCallee | 1.headers | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n ... } | InputArgumentIndex | 1 | @@ -286,6 +1931,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n ... } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n ... } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n ... } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token ... 000001" | CalleeFlexibleAccessPath | request | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token ... 000001" | InputAccessPathFromCallee | 1.headers.authorization | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token ... 000001" | InputArgumentIndex | 1 | @@ -296,6 +1956,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token ... 000001" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token ... 000001" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token ... 000001" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | CalleeFlexibleAccessPath | request | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | InputAccessPathFromCallee | 1.query | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | InputArgumentIndex | 1 | @@ -306,6 +1981,58 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | CalleeFlexibleAccessPath | request.defaults | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | calleeImports | @octokit/request | @@ -315,6 +2042,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | receiverName | request | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | CalleeFlexibleAccessPath | withDefaults | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | calleeImports | @octokit/request | @@ -331,6 +2073,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | CalleeFlexibleAccessPath | withDefaults | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | InputAccessPathFromCallee | 1.query | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | InputArgumentIndex | 1 | @@ -341,6 +2098,70 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo id withDefaults request defaults withDefaults POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:1:51:48 | import ... /rest"; | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:1:51:48 | import ... /rest"; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:1:51:48 | import ... /rest"; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:16 | Octokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:16 | Octokit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Core | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Core | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Octokit as Core | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Octokit as Core | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Octokit as Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:21:51:24 | Core | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:21:51:24 | Core | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:21:51:24 | Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:33:51:47 | "@octokit/rest" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:33:51:47 | "@octokit/rest" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:33:51:47 | "@octokit/rest" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 = new Core() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 = new Core() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 = new Core() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | exceptional return of new Core() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | exceptional return of new Core() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | exceptional return of new Core() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | new Core() | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | new Core() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | new Core() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:18:52:21 | Core | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:18:52:21 | Core | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:18:52:21 | Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:3 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:7 | app.get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:5:54:7 | get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:5:54:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:5:54:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | calleeImports | express | @@ -348,6 +2169,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | calleeImports | express | @@ -355,6 +2191,111 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | CalleeFlexibleAccessPath | kit2.graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | calleeImports | @octokit/rest | @@ -364,6 +2305,58 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | receiverName | kit2 | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | CalleeFlexibleAccessPath | kit2.request | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | calleeImports | @octokit/rest | @@ -382,6 +2375,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | receiverName | kit2 | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | CalleeFlexibleAccessPath | kit2.request | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | InputAccessPathFromCallee | 1.query | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | InputArgumentIndex | 1 | @@ -392,12 +2400,139 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo id result2 kit2 request POST /graphql query foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:1:61:65 | import ... aphql'; | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:1:61:65 | import ... aphql'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:1:61:65 | import ... aphql'; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:16 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:16 | graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | graphql ... Graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | graphql ... Graphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | graphql ... Graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | nativeGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | nativeGraphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:56:61:64 | 'graphql' | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:56:61:64 | 'graphql' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:56:61:64 | 'graphql' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema ... \\n }\\n`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema ... \\n }\\n`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema ... \\n }\\n`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:62:24 | buildSchema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:62:24 | buildSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:62:24 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | buildSc ... \\n }\\n`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | buildSc ... \\n }\\n`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | buildSc ... \\n }\\n`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | exceptional return of buildSc ... \\n }\\n`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | exceptional return of buildSc ... \\n }\\n`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | exceptional return of buildSc ... \\n }\\n`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n typ ... g\\n }\\n` | CalleeFlexibleAccessPath | buildSchema | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n typ ... g\\n }\\n` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n typ ... g\\n }\\n` | calleeImports | graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n typ ... g\\n }\\n` | contextFunctionInterfaces | hello() | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n typ ... g\\n }\\n` | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n typ ... g\\n }\\n` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n type ... ng\\n }\\n | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n type ... ng\\n }\\n | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n type ... ng\\n }\\n | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n type ... ng\\n }\\n | stringConcatenatedWith | -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root = ... \\n },\\n} | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root = ... \\n },\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root = ... \\n },\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:12:71:1 | {\\n hel ... \\n },\\n} | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:12:71:1 | {\\n hel ... \\n },\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:12:71:1 | {\\n hel ... \\n },\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:68:7 | hello | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:68:7 | hello | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:68:7 | hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello: ... !';\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello: ... !';\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello: ... !';\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello: ... !';\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello: ... !';\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello: ... !';\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | enclosingFunctionBody | Hello world! | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | enclosingFunctionName | hello | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n } | assignedToPropName | hello | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | enclosingFunctionBody | Hello world! | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | enclosingFunctionName | hello | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | enclosingFunctionBody | Hello world! | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | enclosingFunctionName | hello | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | enclosingFunctionBody | Hello world! | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | enclosingFunctionName | hello | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:3 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:7 | app.get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | app.get ... })\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | app.get ... })\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | app.get ... })\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | exceptional return of app.get ... })\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | exceptional return of app.get ... })\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | exceptional return of app.get ... })\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:5:73:7 | get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:5:73:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:5:73:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | calleeImports | express | @@ -405,6 +2540,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n })\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n })\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n })\\n} | calleeImports | express | @@ -412,6 +2572,101 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n })\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n })\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n })\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result ... , root) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result ... , root) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result ... , root) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | CalleeFlexibleAccessPath | nativeGraphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | calleeImports | graphql | @@ -420,6 +2675,17 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | stringConcatenatedWith | -endpoint- id + ' }' | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | CalleeFlexibleAccessPath | nativeGraphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | calleeImports | graphql | @@ -428,6 +2694,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | stringConcatenatedWith | '{ foo' -endpoint- ' }' | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | stringConcatenatedWith | '{ foo' + id -endpoint- | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | CalleeFlexibleAccessPath | nativeGraphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | calleeImports | graphql | @@ -436,6 +2714,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | contextFunctionInterfaces | hello() | @@ -450,6 +2743,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n m ... })\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n m ... })\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n m ... })\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | InputAccessPathFromCallee | 1.method | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | InputArgumentIndex | 1 | @@ -459,6 +2767,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n ... "\\n } | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n ... "\\n } | InputAccessPathFromCallee | 1.headers | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n ... "\\n } | InputArgumentIndex | 1 | @@ -468,6 +2791,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n ... "\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n ... "\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n ... "\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | InputAccessPathFromCallee | 1.headers.Content-Type | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | InputArgumentIndex | 1 | @@ -477,6 +2815,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n }) | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n }) | InputAccessPathFromCallee | 1.body | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n }) | InputArgumentIndex | 1 | @@ -486,6 +2849,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n }) | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n ... `\\n } | CalleeFlexibleAccessPath | JSON.stringify | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n ... `\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n ... `\\n } | contextFunctionInterfaces | hello() | @@ -494,6 +2867,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n ... `\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n ... `\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n ... `\\n } | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query: ... }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n ... }` | CalleeFlexibleAccessPath | JSON.stringify | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n ... }` | InputAccessPathFromCallee | 0.query | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n ... }` | InputArgumentIndex | 0 | @@ -503,6 +2891,39 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n ... }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n ... }` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n ... }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n ... | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n ... | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n ... | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n ... | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n ... | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n ... | stringConcatenatedWith | -endpoint- id + '\n }\n }' | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | stringConcatenatedWith | '{\n thing {\n name\n url\n ' -endpoint- '\n }\n }' | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n }\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n }\\n } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n }\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n }\\n } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n }\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n }\\n } | stringConcatenatedWith | '{\n thing {\n name\n url\n ' + id -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | contextFunctionInterfaces | hello() | @@ -517,6 +2938,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n m ... })\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n m ... })\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n m ... })\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | InputAccessPathFromCallee | 1.method | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | InputArgumentIndex | 1 | @@ -526,6 +2962,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n ... "\\n } | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n ... "\\n } | InputAccessPathFromCallee | 1.headers | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n ... "\\n } | InputArgumentIndex | 1 | @@ -535,6 +2986,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n ... "\\n } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n ... "\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n ... "\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | InputAccessPathFromCallee | 1.headers.Content-Type | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | InputArgumentIndex | 1 | @@ -544,6 +3010,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n }) | CalleeFlexibleAccessPath | fetch | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n }) | InputAccessPathFromCallee | 1.body | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n }) | InputArgumentIndex | 1 | @@ -553,6 +3044,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n }) | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n }) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n ... }\\n } | CalleeFlexibleAccessPath | JSON.stringify | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n ... }\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n ... }\\n } | contextFunctionInterfaces | hello() | @@ -561,6 +3062,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n ... }\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n ... }\\n } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n ... }\\n } | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query: ... }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n ... }` | CalleeFlexibleAccessPath | JSON.stringify | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n ... }` | InputAccessPathFromCallee | 0.query | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n ... }` | InputArgumentIndex | 0 | @@ -570,6 +3086,27 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n ... }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n ... }` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n ... }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n ... } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n ... } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n ... } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n ... } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n ... } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n ... } | stringConcatenatedWith | -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ... } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n ... } | CalleeFlexibleAccessPath | JSON.stringify | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n ... } | InputAccessPathFromCallee | 0.variables | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n ... } | InputArgumentIndex | 0 | @@ -579,6 +3116,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n ... } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n ... } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n ... } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | CalleeFlexibleAccessPath | JSON.stringify | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | InputAccessPathFromCallee | 0.variables.id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | InputArgumentIndex | 0 | @@ -588,12 +3140,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n id \n }\n } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n thing {\n name\n url\n $id\n }\n } variables id id | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github ... ithub') | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github ... ithub') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github ... ithub') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:22 | require | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:22 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | exceptional return of require ... ithub') | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | exceptional return of require ... ithub') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | exceptional return of require ... ithub') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | require ... ithub') | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | require ... ithub') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | require ... ithub') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | contextFunctionInterfaces | hello() | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:3 | app | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:7 | app.get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:5:116:7 | get | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:5:116:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:5:116:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | calleeImports | express | @@ -601,6 +3187,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | calleeImports | express | @@ -608,6 +3209,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | CalleeFlexibleAccessPath | github.getOctokit | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | calleeImports | @actions/github | @@ -617,6 +3283,86 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | receiverName | github | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | CalleeFlexibleAccessPath | kit.graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | calleeImports | @actions/github | @@ -626,6 +3372,241 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | | autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | receiverName | kit | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo | stringConcatenatedWith | -endpoint- id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | contextFunctionInterfaces | hello() | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo id | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql | +| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | stringConcatenatedWith | 'foo ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:0 | this | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:0 | this | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | checkSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | checkSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | checkSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | joiSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | joiSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | joiSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | schema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | schema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:22 | import ... 'ajv'; | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:22 | import ... 'ajv'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:22 | import ... 'ajv'; | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:17:1:21 | 'ajv' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:17:1:21 | 'ajv' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:17:1:21 | 'ajv' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:1:2:30 | import ... press'; | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:1:2:30 | import ... press'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:1:2:30 | import ... press'; | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:21:2:29 | 'express' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:21:2:29 | 'express' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:21:2:29 | 'express' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:1:3:38 | import ... ngodb'; | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:1:3:38 | import ... ngodb'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:1:3:38 | import ... ngodb'; | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:29:3:37 | 'mongodb' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:29:3:37 | 'mongodb' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:29:3:37 | 'mongodb' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:9 | app | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:9 | app | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app = express() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app = express() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:19 | express | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:19 | express | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | exceptional return of express() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | exceptional return of express() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | express() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | express() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema ... },\\n} | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema ... },\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema ... },\\n} | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:16:13:1 | {\\n t ... },\\n} | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:16:13:1 | {\\n t ... },\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:16:13:1 | {\\n t ... },\\n} | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:8 | type | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:8 | type | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:8 | type | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | assignedToPropName | type | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:9:14 | properties | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:9:14 | properties | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:9:14 | properties | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n ... ,\\n } | assignedToPropName | properties | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n ... ,\\n } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n ... ,\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n ... ,\\n } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:12 | date | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:12 | date | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:12 | date | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | assignedToPropName | date | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:20 | type | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:20 | type | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:20 | type | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | assignedToPropName | type | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:13 | title | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:13 | title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:13 | title | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title: ... ring' } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title: ... ring' } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title: ... ring' } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title: ... ring' } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title: ... ring' } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title: ... ring' } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:21 | type | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:21 | type | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:21 | type | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | assignedToPropName | type | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv = new Ajv() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv = new Ajv() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv = new Ajv() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | exceptional return of new Ajv() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | exceptional return of new Ajv() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | exceptional return of new Ajv() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | new Ajv() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | new Ajv() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | new Ajv() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:17:14:19 | Ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:17:14:19 | Ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:17:14:19 | Ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSc ... schema) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSc ... schema) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSc ... schema) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:23 | ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:23 | ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:23 | ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:31 | ajv.compile | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:31 | ajv.compile | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:31 | ajv.compile | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | ajv.compile(schema) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | ajv.compile(schema) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | ajv.compile(schema) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | exceptional return of ajv.compile(schema) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | exceptional return of ajv.compile(schema) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | exceptional return of ajv.compile(schema) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:25:15:31 | compile | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:25:15:31 | compile | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:25:15:31 | compile | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | CalleeFlexibleAccessPath | ajv.compile | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | calleeImports | ajv | @@ -633,6 +3614,76 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | receiverName | ajv | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | functio ... null;\\n} | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | functio ... null;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | functio ... null;\\n} | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextSurroundingFunctionParameters | (x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextSurroundingFunctionParameters | (x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | contextSurroundingFunctionParameters | (x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | contextSurroundingFunctionParameters | (x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | contextSurroundingFunctionParameters | (x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | enclosingFunctionBody | x x null | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | enclosingFunctionName | validate | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:3 | app | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:3 | app | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:8 | app.post | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:8 | app.post | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | app.pos ... });\\n}) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | app.pos ... });\\n}) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | exceptional return of app.pos ... });\\n}) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:5:21:8 | post | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:5:21:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:5:21:8 | post | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | calleeImports | express | @@ -640,6 +3691,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ... });\\n} | calleeImports | express | @@ -647,6 +3713,59 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ... });\\n} | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n }) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n }) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n }) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n }) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -656,6 +3775,36 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n } | calleeImports | mongodb | @@ -665,6 +3814,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n } | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | contextFunctionInterfaces | validate(x) | @@ -673,11 +3887,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | CalleeFlexibleAccessPath | JSON.parse | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | contextFunctionInterfaces | validate(x) | @@ -686,6 +3945,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | CalleeFlexibleAccessPath | checkSchema | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | calleeImports | ajv | @@ -694,6 +3978,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | contextFunctionInterfaces | validate(x) | @@ -702,6 +4011,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ... query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ... query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ... query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ... query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ... query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ... query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ... query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ... query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | contextFunctionInterfaces | validate(x) | @@ -710,6 +4069,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | contextFunctionInterfaces | validate(x) | @@ -718,6 +4117,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | contextFunctionInterfaces | validate(x) | @@ -726,6 +4150,55 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:1:39:22 | import ... 'joi'; | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:1:39:22 | import ... 'joi'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:1:39:22 | import ... 'joi'; | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:17:39:21 | 'joi' | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:17:39:21 | 'joi' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:17:39:21 | 'joi' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSche ... title') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSche ... title') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSche ... title') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:21 | Joi | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:21 | Joi | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:21 | Joi | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:28 | Joi.object | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:28 | Joi.object | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:28 | Joi.object | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | Joi.obj ... ed()\\n}) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | Joi.obj ... ed()\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | Joi.obj ... ed()\\n}) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | exceptional return of Joi.obj ... ed()\\n}) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | exceptional return of Joi.obj ... ed()\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | exceptional return of Joi.obj ... ed()\\n}) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:7 | Joi.obj ... }).with | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:7 | Joi.obj ... }).with | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:7 | Joi.obj ... }).with | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | Joi.obj ... title') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | Joi.obj ... title') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | Joi.obj ... title') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | exceptional return of Joi.obj ... title') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | exceptional return of Joi.obj ... title') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | exceptional return of Joi.obj ... title') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:23:41:28 | object | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:23:41:28 | object | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:23:41:28 | object | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n d ... red()\\n} | CalleeFlexibleAccessPath | Joi.object | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n d ... red()\\n} | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n d ... red()\\n} | calleeImports | joi | @@ -733,6 +4206,30 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n d ... red()\\n} | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n d ... red()\\n} | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n d ... red()\\n} | receiverName | Joi | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:8 | date | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:8 | date | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:8 | date | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:13 | Joi | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:13 | Joi | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:13 | Joi | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:20 | Joi.string | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:20 | Joi.string | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:20 | Joi.string | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | Joi.string() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | Joi.string() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | Joi.string() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | exceptional return of Joi.string() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | exceptional return of Joi.string() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | exceptional return of Joi.string() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:31 | Joi.str ... equired | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:31 | Joi.str ... equired | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:31 | Joi.str ... equired | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | CalleeFlexibleAccessPath | Joi.object | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | InputAccessPathFromCallee | 0.date | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | InputArgumentIndex | 0 | @@ -741,6 +4238,39 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | contextFunctionInterfaces | validate(x) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | exceptional return of Joi.str ... uired() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | exceptional return of Joi.str ... uired() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | exceptional return of Joi.str ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:15:42:20 | string | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:15:42:20 | string | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:15:42:20 | string | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:24:42:31 | required | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:24:42:31 | required | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:24:42:31 | required | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:9 | title | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:9 | title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:9 | title | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title: ... uired() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title: ... uired() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title: ... uired() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title: ... uired() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title: ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title: ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:14 | Joi | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:14 | Joi | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:14 | Joi | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:21 | Joi.string | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:21 | Joi.string | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:21 | Joi.string | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | Joi.string() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | Joi.string() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | Joi.string() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | exceptional return of Joi.string() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | exceptional return of Joi.string() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | exceptional return of Joi.string() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:32 | Joi.str ... equired | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:32 | Joi.str ... equired | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:32 | Joi.str ... equired | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | CalleeFlexibleAccessPath | Joi.object | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | InputAccessPathFromCallee | 0.title | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | InputArgumentIndex | 0 | @@ -749,6 +4279,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | contextFunctionInterfaces | validate(x) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | exceptional return of Joi.str ... uired() | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | exceptional return of Joi.str ... uired() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | exceptional return of Joi.str ... uired() | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:16:43:21 | string | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:16:43:21 | string | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:16:43:21 | string | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:25:43:32 | required | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:25:43:32 | required | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:25:43:32 | required | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:4:44:7 | with | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:4:44:7 | with | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:4:44:7 | with | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | CalleeFlexibleAccessPath | Joi.object().with | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | calleeImports | joi | @@ -761,6 +4303,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | contextFunctionInterfaces | validate(x) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:3 | app | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:3 | app | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:8 | app.post | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:8 | app.post | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | app.pos ... });\\n}) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | app.pos ... });\\n}) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | exceptional return of app.pos ... });\\n}) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:5:46:8 | post | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:5:46:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:5:46:8 | post | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | calleeImports | express | @@ -768,6 +4325,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ... });\\n} | calleeImports | express | @@ -775,6 +4347,59 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ... });\\n} | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n }) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n }) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n }) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n }) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -784,6 +4409,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n } | calleeImports | mongodb | @@ -793,6 +4433,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n } | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | contextFunctionInterfaces | validate(x) | @@ -801,11 +4506,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | CalleeFlexibleAccessPath | JSON.parse | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | contextFunctionInterfaces | validate(x) | @@ -814,6 +4564,101 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | contextFunctionInterfaces | validate(x) | @@ -822,6 +4667,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | contextFunctionInterfaces | validate(x) | @@ -830,6 +4700,61 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | contextFunctionInterfaces | validate(x) | @@ -838,6 +4763,36 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | contextFunctionInterfaces | validate(x) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | contextFunctionInterfaces | validate(x) | @@ -846,24 +4801,123 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | fileImports | ajv express joi mongodb | | autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:0 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:0 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | ldap | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | ldap | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | ldap | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | require | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | require | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | url | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | url | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:10 | http | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:10 | http | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:10 | http | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http = ... "http") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http = ... "http") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http = ... "http") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:20 | require | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:20 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:20 | require | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | exceptional return of require("http") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | exceptional return of require("http") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | exceptional return of require("http") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | require("http") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | require("http") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | require("http") | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | contextFunctionInterfaces | sanitizeInput(input) | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url = require("url") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url = require("url") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url = require("url") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:19 | require | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:19 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:19 | require | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | exceptional return of require("url") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | exceptional return of require("url") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | exceptional return of require("url") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | require("url") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | require("url") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | require("url") | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | contextFunctionInterfaces | sanitizeInput(input) | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap = ... dapjs") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap = ... dapjs") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap = ... dapjs") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:20 | require | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:20 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:20 | require | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | exceptional return of require("ldapjs") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | exceptional return of require("ldapjs") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | exceptional return of require("ldapjs") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | require("ldapjs") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | require("ldapjs") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | require("ldapjs") | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | contextFunctionInterfaces | sanitizeInput(input) | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client ... 89",\\n}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client ... 89",\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client ... 89",\\n}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:19 | ldap | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:19 | ldap | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:19 | ldap | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:32 | ldap.createClient | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:32 | ldap.createClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:32 | ldap.createClient | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | exceptional return of ldap.cr ... 89",\\n}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | exceptional return of ldap.cr ... 89",\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | exceptional return of ldap.cr ... 89",\\n}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | ldap.cr ... 89",\\n}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | ldap.cr ... 89",\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | ldap.cr ... 89",\\n}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:21:4:32 | createClient | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:21:4:32 | createClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:21:4:32 | createClient | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n url ... 389",\\n} | CalleeFlexibleAccessPath | ldap.createClient | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n url ... 389",\\n} | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n url ... 389",\\n} | calleeImports | ldapjs | @@ -871,6 +4925,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n url ... 389",\\n} | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n url ... 389",\\n} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n url ... 389",\\n} | receiverName | ldap | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:5 | url | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:5 | url | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:5 | url | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | CalleeFlexibleAccessPath | ldap.createClient | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | InputAccessPathFromCallee | 0.url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | InputArgumentIndex | 0 | @@ -879,6 +4942,149 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | contextFunctionInterfaces | sanitizeInput(input) | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitiz ... 2f");\\n} | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitiz ... 2f");\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitiz ... 2f");\\n} | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | functio ... 2f");\\n} | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | functio ... 2f");\\n} | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | functio ... 2f");\\n} | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n .replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n .replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n .replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n .replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n .replace | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n ... "\\\\2a") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n ... "\\\\2a") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n ... "\\\\2a") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n ... "\\\\2a") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n ... "\\\\2a") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n ... "\\\\2a") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n ... "\\\\2a") | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n ... "\\\\2a") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n ... "\\\\2a") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n ... "\\\\2a") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n ... replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n ... replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n ... replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n ... replace | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n ... "\\\\28") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n ... "\\\\28") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n ... "\\\\28") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n ... "\\\\28") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n ... "\\\\28") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n ... "\\\\28") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n ... "\\\\28") | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n ... "\\\\28") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n ... "\\\\28") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n ... "\\\\28") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n ... replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n ... replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n ... replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n ... replace | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n ... "\\\\29") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n ... "\\\\29") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n ... "\\\\29") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n ... "\\\\29") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n ... "\\\\29") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n ... "\\\\29") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n ... "\\\\29") | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n ... "\\\\29") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n ... "\\\\29") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n ... "\\\\29") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n ... replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n ... replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n ... replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n ... replace | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n ... "\\\\5c") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n ... "\\\\5c") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n ... "\\\\5c") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n ... "\\\\5c") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n ... "\\\\5c") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n ... "\\\\5c") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n ... "\\\\5c") | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n ... "\\\\5c") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n ... "\\\\5c") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n ... "\\\\5c") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n ... replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n ... replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n ... replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n ... replace | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n ... "\\\\00") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n ... "\\\\00") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n ... "\\\\00") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n ... "\\\\00") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n ... "\\\\00") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n ... "\\\\00") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n ... "\\\\00") | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n ... "\\\\00") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n ... "\\\\00") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n ... "\\\\00") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n ... replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n ... replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n ... replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n ... replace | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n ... "\\\\2f") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n ... "\\\\2f") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n ... "\\\\2f") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n ... "\\\\2f") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n ... "\\\\2f") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n ... "\\\\2f") | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n ... "\\\\2f") | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n ... "\\\\2f") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n ... "\\\\2f") | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n ... "\\\\2f") | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | CalleeFlexibleAccessPath | input.replace | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | contextFunctionInterfaces | sanitizeInput(input) | @@ -895,6 +5101,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | enclosingFunctionName | sanitizeInput | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | receiverName | input | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | CalleeFlexibleAccessPath | input.replace().replace | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | contextFunctionInterfaces | sanitizeInput(input) | @@ -909,6 +5120,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | enclosingFunctionName | sanitizeInput | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | CalleeFlexibleAccessPath | input.replace().replace().replace | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | contextFunctionInterfaces | sanitizeInput(input) | @@ -923,6 +5139,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | enclosingFunctionName | sanitizeInput | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | CalleeFlexibleAccessPath | input.replace().replace().replace().replace | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | contextFunctionInterfaces | sanitizeInput(input) | @@ -937,6 +5158,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | enclosingFunctionName | sanitizeInput | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | CalleeFlexibleAccessPath | input.replace().replace().replace().replace().replace | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | contextFunctionInterfaces | sanitizeInput(input) | @@ -951,6 +5177,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | enclosingFunctionName | sanitizeInput | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | contextSurroundingFunctionParameters | (input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | enclosingFunctionName | sanitizeInput | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | CalleeFlexibleAccessPath | input.replace().replace().replace().replace().replace().replace | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | contextFunctionInterfaces | sanitizeInput(input) | @@ -965,6 +5196,55 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | enclosingFunctionName | sanitizeInput | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:19:12 | server | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:19:12 | server | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:19:12 | server | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server ... T OK\\n}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server ... T OK\\n}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:19 | http | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:19 | http | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:19 | http | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:32 | http.createServer | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:32 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:32 | http.createServer | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | http.cr ... T OK\\n}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:21:19:32 | createServer | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:21:19:32 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:21:19:32 | createServer | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | calleeImports | http | @@ -972,6 +5252,76 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | receiverName | http | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | calleeImports | url | @@ -981,6 +5331,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | receiverName | url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | calleeImports | url | @@ -990,6 +5345,142 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | receiverName | url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n } | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n } | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n f ... )`,\\n } | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n f ... )`,\\n } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n f ... )`,\\n } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n f ... )`,\\n } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n f ... )`,\\n } | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | assignedToPropName | filter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | stringConcatenatedWith | -endpoint- username + ')(username=' + username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | stringConcatenatedWith | '(\|(name=' + username -endpoint- username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | stringConcatenatedWith | '(\|(name=' + username + ')(username=' -endpoint- '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | stringConcatenatedWith | '(\|(name=' + username + ')(username=' + username -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | calleeImports | ldapjs | @@ -1008,6 +5499,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | calleeImports | ldapjs | @@ -1017,6 +5523,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ... {}\\n ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ... {}\\n ) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ... {}\\n ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ... {}\\n ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ... {}\\n ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ... {}\\n ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ... {}\\n ) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ... {}\\n ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ... {}\\n ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ... {}\\n ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | calleeImports | ldapjs | @@ -1035,6 +5581,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | InputAccessPathFromCallee | 1.filter | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | InputArgumentIndex | 1 | @@ -1045,6 +5606,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | stringConcatenatedWith | -endpoint- username + ')(username=' + username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | stringConcatenatedWith | '(\|(name=' + username -endpoint- username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | stringConcatenatedWith | '(\|(name=' + username + ')(username=' -endpoint- '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | stringConcatenatedWith | '(\|(name=' + username + ')(username=' + username -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | calleeImports | ldapjs | @@ -1054,6 +5660,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ... {}\\n ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ... {}\\n ) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ... {}\\n ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ... {}\\n ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ... {}\\n ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ... {}\\n ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ... {}\\n ) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ... {}\\n ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ... {}\\n ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ... {}\\n ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | calleeImports | ldapjs | @@ -1072,6 +5718,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n } | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n } | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n } | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ... )}))` | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ... )}))` | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ... )}))` | InputAccessPathFromCallee | 1.filter | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ... )}))` | InputArgumentIndex | 1 | @@ -1082,6 +5743,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ... )}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ... )}))` | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ... )}))` | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | stringConcatenatedWith | -endpoint- sanitizeInput() + ')(username=' + sanitizeInput() + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + sanitizeInput() + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | stringConcatenatedWith | '(\|(name=' + sanitizeInput() -endpoint- sanitizeInput() + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ... ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ... ) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ... ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ... ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ... ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ... ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ... ) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ... ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ... ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ... ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ... ) | stringConcatenatedWith | '(\|(name=' + sanitizeInput() + ')(username=' -endpoint- '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | stringConcatenatedWith | '(\|(name=' + sanitizeInput() + ')(username=' + sanitizeInput() -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | calleeImports | ldapjs | @@ -1091,6 +5817,257 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n f ... ],\\n } | CalleeFlexibleAccessPath | OrFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n f ... ],\\n } | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n f ... ],\\n } | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n f ... ],\\n } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n f ... ],\\n } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n f ... ],\\n } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n f ... ],\\n } | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n ] | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | CalleeFlexibleAccessPath | OrFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | InputAccessPathFromCallee | ?.filters | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | assignedToPropName | filters | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n ... ,\\n ] | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ... }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ... }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ... }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ... }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ... }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n ... } | CalleeFlexibleAccessPath | EqualityFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n ... } | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n ... } | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n ... } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n ... } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n ... } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n ... } | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | CalleeFlexibleAccessPath | EqualityFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | InputAccessPathFromCallee | ?.attribute | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | assignedToPropName | attribute | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | CalleeFlexibleAccessPath | EqualityFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | InputAccessPathFromCallee | ?.value | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | assignedToPropName | value | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ... }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ... }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ... }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ... }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ... }) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n ... } | CalleeFlexibleAccessPath | EqualityFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n ... } | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n ... } | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n ... } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n ... } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n ... } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n ... } | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | CalleeFlexibleAccessPath | EqualityFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | InputAccessPathFromCallee | ?.attribute | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | assignedToPropName | attribute | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | CalleeFlexibleAccessPath | EqualityFilter | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | InputAccessPathFromCallee | ?.value | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | assignedToPropName | value | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | calleeImports | ldapjs | @@ -1109,6 +6086,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | InputAccessPathFromCallee | 1.filter | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | InputArgumentIndex | 1 | @@ -1119,6 +6111,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | calleeImports | ldapjs | @@ -1128,6 +6135,61 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n ) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n ) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n ) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n ) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n ) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | CalleeFlexibleAccessPath | ldap.parseFilter | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | calleeImports | ldapjs | @@ -1137,6 +6199,61 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | receiverName | ldap | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | stringConcatenatedWith | -endpoint- username + ')(username=' + username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | stringConcatenatedWith | '(\|(name=' + username -endpoint- username + '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | stringConcatenatedWith | '(\|(name=' + username + ')(username=' -endpoint- '))' | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | stringConcatenatedWith | '(\|(name=' + username + ')(username=' + username -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | calleeImports | ldapjs | @@ -1155,6 +6272,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | InputAccessPathFromCallee | 1.filter | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | InputArgumentIndex | 1 | @@ -1165,6 +6297,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | CalleeFlexibleAccessPath | client.search | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | calleeImports | ldapjs | @@ -1174,6 +6321,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | CalleeFlexibleAccessPath | ldap.parseDN | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | calleeImports | ldapjs | @@ -1183,6 +6380,33 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | receiverName | ldap | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | stringConcatenatedWith | -endpoint- username | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | stringConcatenatedWith | 'cn=' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ... dn) {} | CalleeFlexibleAccessPath | ldap.parseDN | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ... dn) {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ... dn) {} | calleeImports | ldapjs | @@ -1192,6 +6416,36 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ... dn) {} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ... dn) {} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ... dn) {} | receiverName | ldap | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | contextSurroundingFunctionParameters | (req, res)\n(err, dn) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | contextSurroundingFunctionParameters | (req, res)\n(err, dn) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:6 | server | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:6 | server | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:6 | server | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:13 | server.listen | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:13 | server.listen | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:13 | server.listen | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | exceptional return of server. ... => {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | exceptional return of server. ... => {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | exceptional return of server. ... => {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | server. ... => {}) | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | server. ... => {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | server. ... => {}) | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:8:71:13 | listen | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:8:71:13 | listen | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:8:71:13 | listen | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | CalleeFlexibleAccessPath | server.listen | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | calleeImports | http | @@ -1199,6 +6453,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | receiverName | server | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | enclosingFunctionName | server.listen#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | CalleeFlexibleAccessPath | server.listen | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | calleeImports | http | @@ -1206,30 +6464,239 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | contextSurroundingFunctionParameters | () | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | fileImports | http ldapjs url | | autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | receiverName | server | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | enclosingFunctionName | server.listen#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | enclosingFunctionName | server.listen#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | fileImports | http ldapjs url | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:0 | this | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | module | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | module | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | require | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:12 | MarsDB | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:12 | MarsDB | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:12 | MarsDB | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB ... arsdb") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB ... arsdb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB ... arsdb") | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:22 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:22 | require | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | exceptional return of require("marsdb") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | exceptional return of require("marsdb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | exceptional return of require("marsdb") | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | require("marsdb") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | require("marsdb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | require("marsdb") | fileImports | marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:11 | myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:11 | myDoc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:11 | myDoc | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc = ... myDoc") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc = ... myDoc") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc = ... myDoc") | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | exceptional return of new Mar ... myDoc") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | exceptional return of new Mar ... myDoc") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | exceptional return of new Mar ... myDoc") | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | new Mar ... myDoc") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | new Mar ... myDoc") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | new Mar ... myDoc") | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:24 | MarsDB | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:24 | MarsDB | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:24 | MarsDB | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:35 | MarsDB.Collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:35 | MarsDB.Collection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:35 | MarsDB.Collection | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:26:3:35 | Collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:26:3:35 | Collection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:26:3:35 | Collection | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | CalleeFlexibleAccessPath | MarsDB.Collection | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | calleeImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:5:8 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:5:8 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:5:8 | db | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db = {\\n myDoc\\n} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db = {\\n myDoc\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db = {\\n myDoc\\n} | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:12:7:1 | {\\n myDoc\\n} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:12:7:1 | {\\n myDoc\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:12:7:1 | {\\n myDoc\\n} | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | assignedToPropName | myDoc | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:6 | module | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:6 | module | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:14 | module.exports | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:14 | module.exports | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:19 | module.exports = db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:19 | module.exports = db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:19 | module.exports = db | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:8:9:14 | exports | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:8:9:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:8:9:14 | exports | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | assignedToPropName | exports | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | fileImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:0 | this | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | db | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | require | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:13 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:13 | express | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express ... press") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express ... press") | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:23 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:23 | require | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | exceptional return of require("express") | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | require("express") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | require("express") | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:16 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:16 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:16 | bodyParser | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyPar ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyPar ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyPar ... arser") | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyParser | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:26 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:26 | require | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | exceptional return of require ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | exceptional return of require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | exceptional return of require ... arser") | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | require ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | require ... arser") | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db = re ... -from') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db = re ... -from') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db = re ... -from') | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:18 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:18 | require | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | exceptional return of require ... -from') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | exceptional return of require ... -from') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | exceptional return of require ... -from') | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | require ... -from') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | require ... -from') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | require ... -from') | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:9 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:9 | app | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app = express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app = express() | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:19 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:19 | express | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | exceptional return of express() | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | express() | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:3 | app | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:7 | app.use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:7 | app.use | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | app.use ... rue })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | app.use ... rue })) | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | exceptional return of app.use ... rue })) | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:5:7:7 | use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:5:7:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:5:7:7 | use | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:18 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:18 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:18 | bodyParser | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:29 | bodyPar ... encoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:29 | bodyPar ... encoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:29 | bodyPar ... encoded | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | calleeImports | express | @@ -1237,6 +6704,12 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | exceptional return of bodyPar ... true }) | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:20:7:29 | urlencoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:20:7:29 | urlencoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:20:7:29 | urlencoded | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | calleeImports | body-parser | @@ -1244,6 +6717,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | receiverName | bodyParser | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:40 | extended | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:40 | extended | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:40 | extended | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | InputAccessPathFromCallee | 0.extended | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | InputArgumentIndex | 0 | @@ -1252,6 +6734,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:3 | app | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:8 | app.post | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | app.pos ... {});\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | app.pos ... {});\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | app.pos ... {});\\n}) | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | exceptional return of app.pos ... {});\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | exceptional return of app.pos ... {});\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | exceptional return of app.pos ... {});\\n}) | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:5:9:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:5:9:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:5:9:8 | post | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | calleeImports | express | @@ -1259,6 +6756,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ... {});\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ... {});\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ... {});\\n} | calleeImports | express | @@ -1266,11 +6773,132 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ... {});\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ... {});\\n} | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ... {});\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ... => {}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ... => {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ... => {}) | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ... => {}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ... => {}) | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ... => {}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ... => {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ... => {}) | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ... => {}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ... => {}) | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | CalleeFlexibleAccessPath | db.myDoc.find | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | calleeImports | ./marsdb-flow-from | @@ -1279,6 +6907,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | fileImports | ./marsdb-flow-from body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | CalleeFlexibleAccessPath | db.myDoc.find | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | calleeImports | ./marsdb-flow-from | @@ -1287,24 +6920,177 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, data) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | contextSurroundingFunctionParameters | (req, res)\n(err, data) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | enclosingFunctionBody | req res query query title req body title db myDoc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | fileImports | ./marsdb-flow-from body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:0 | this | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | doc | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | require | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:13 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:13 | express | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express ... press") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express ... press") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:23 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:23 | require | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | exceptional return of require("express") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | require("express") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | require("express") | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:8 | MarsDB | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:8 | MarsDB | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:8 | MarsDB | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB ... arsdb") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB ... arsdb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB ... arsdb") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:18 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:18 | require | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | exceptional return of require("marsdb") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | exceptional return of require("marsdb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | exceptional return of require("marsdb") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | require("marsdb") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | require("marsdb") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | require("marsdb") | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:12 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:12 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:12 | bodyParser | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyPar ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyPar ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyPar ... arser") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyParser | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:22 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:22 | require | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | exceptional return of require ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | exceptional return of require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | exceptional return of require ... arser") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | require ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | require ... arser") | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc = n ... myDoc") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc = n ... myDoc") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc = n ... myDoc") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | exceptional return of new Mar ... myDoc") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | exceptional return of new Mar ... myDoc") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | exceptional return of new Mar ... myDoc") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | new Mar ... myDoc") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | new Mar ... myDoc") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | new Mar ... myDoc") | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:20 | MarsDB | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:20 | MarsDB | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:20 | MarsDB | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:31 | MarsDB.Collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:31 | MarsDB.Collection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:31 | MarsDB.Collection | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:22:5:31 | Collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:22:5:31 | Collection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:22:5:31 | Collection | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | CalleeFlexibleAccessPath | MarsDB.Collection | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | calleeImports | marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:9 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:9 | app | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app = express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app = express() | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:19 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:19 | express | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | exceptional return of express() | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | express() | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:3 | app | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:7 | app.use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:7 | app.use | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | app.use ... rue })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | app.use ... rue })) | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | exceptional return of app.use ... rue })) | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:5:9:7 | use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:5:9:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:5:9:7 | use | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:18 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:18 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:18 | bodyParser | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:29 | bodyPar ... encoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:29 | bodyPar ... encoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:29 | bodyPar ... encoded | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | calleeImports | express | @@ -1312,6 +7098,12 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:20:9:29 | urlencoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:20:9:29 | urlencoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:20:9:29 | urlencoded | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | calleeImports | body-parser | @@ -1319,6 +7111,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | receiverName | bodyParser | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:40 | extended | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:40 | extended | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:40 | extended | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | InputAccessPathFromCallee | 0.extended | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | InputArgumentIndex | 0 | @@ -1327,6 +7128,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:3 | app | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:8 | app.post | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | app.pos ... {});\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | app.pos ... {});\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | app.pos ... {});\\n}) | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | exceptional return of app.pos ... {});\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | exceptional return of app.pos ... {});\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | exceptional return of app.pos ... {});\\n}) | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:5:11:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:5:11:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:5:11:8 | post | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | calleeImports | express | @@ -1334,6 +7150,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ... {});\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ... {});\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ... {});\\n} | calleeImports | express | @@ -1341,11 +7167,122 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ... {});\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ... {});\\n} | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ... {});\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | enclosingFunctionBody | req res query query title req body title doc find query err data | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ... => {}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ... => {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ... => {}) | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ... => {}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ... => {}) | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ... => {}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ... => {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ... => {}) | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ... => {}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ... => {}) | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | calleeImports | marsdb | @@ -1355,6 +7292,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | calleeImports | marsdb | @@ -1364,24 +7306,201 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | fileImports | body-parser express marsdb | | autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | contextSurroundingFunctionParameters | (req, res)\n(err, data) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | contextSurroundingFunctionParameters | (req, res)\n(err, data) | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | enclosingFunctionBody | req res query query title req body title doc find query err data | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | fileImports | body-parser express marsdb | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:0 | this | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | doc | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | require | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:13 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:13 | express | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express ... press") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express ... press") | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:23 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:23 | require | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | exceptional return of require("express") | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | require("express") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | require("express") | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:11 | minimongo | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:11 | minimongo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:11 | minimongo | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimon ... mongo") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimon ... mongo") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimon ... mongo") | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimongo | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimongo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimongo | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:21 | require | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | exceptional return of require("minimongo") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | exceptional return of require("minimongo") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | exceptional return of require("minimongo") | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | require("minimongo") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | require("minimongo") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | require("minimongo") | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:12 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:12 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:12 | bodyParser | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyPar ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyPar ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyPar ... arser") | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyParser | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:22 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:22 | require | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | exceptional return of require ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | exceptional return of require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | exceptional return of require ... arser") | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | require ... arser") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | require ... arser") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | require ... arser") | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:11 | LocalDb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:11 | LocalDb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:11 | LocalDb | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb ... emoryDb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb ... emoryDb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb ... emoryDb | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:23 | minimongo | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:23 | minimongo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:23 | minimongo | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:32 | minimongo.MemoryDb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:32 | minimongo.MemoryDb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:32 | minimongo.MemoryDb | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:25:5:32 | MemoryDb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:25:5:32 | MemoryDb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:25:5:32 | MemoryDb | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:4 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:4 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:4 | db | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db = new LocalDb() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db = new LocalDb() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db = new LocalDb() | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | exceptional return of new LocalDb() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | exceptional return of new LocalDb() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | exceptional return of new LocalDb() | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | new LocalDb() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | new LocalDb() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | new LocalDb() | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:12:6:18 | LocalDb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:12:6:18 | LocalDb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:12:6:18 | LocalDb | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc = db.myDocs | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc = db.myDocs | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc = db.myDocs | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:10 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:10 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:10 | db | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:17 | db.myDocs | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:17 | db.myDocs | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:17 | db.myDocs | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:12:7:17 | myDocs | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:12:7:17 | myDocs | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:12:7:17 | myDocs | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:9 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:9 | app | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app = express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app = express() | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:19 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:19 | express | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | exceptional return of express() | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | express() | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:3 | app | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:7 | app.use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:7 | app.use | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | app.use ... rue })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | app.use ... rue })) | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | exceptional return of app.use ... rue })) | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:5:11:7 | use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:5:11:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:5:11:7 | use | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:18 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:18 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:18 | bodyParser | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:29 | bodyPar ... encoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:29 | bodyPar ... encoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:29 | bodyPar ... encoded | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | calleeImports | express | @@ -1389,6 +7508,12 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | exceptional return of bodyPar ... true }) | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:20:11:29 | urlencoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:20:11:29 | urlencoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:20:11:29 | urlencoded | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | calleeImports | body-parser | @@ -1396,6 +7521,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | receiverName | bodyParser | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:40 | extended | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:40 | extended | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:40 | extended | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | InputAccessPathFromCallee | 0.extended | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | InputArgumentIndex | 0 | @@ -1404,6 +7538,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:3 | app | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:8 | app.post | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | app.pos ... ry);\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | app.pos ... ry);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | app.pos ... ry);\\n}) | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | exceptional return of app.pos ... ry);\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | exceptional return of app.pos ... ry);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | exceptional return of app.pos ... ry);\\n}) | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:5:13:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:5:13:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:5:13:8 | post | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | calleeImports | express | @@ -1411,6 +7560,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | calleeImports | express | @@ -1418,11 +7577,122 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | enclosingFunctionBody | req res query query title req body title doc find query | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | fileImports | body-parser express minimongo | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | enclosingFunctionBody | req res query query title req body title doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | calleeImports | minimongo | @@ -1432,24 +7702,152 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | fileImports | body-parser express minimongo | | autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | this | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | this | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | require | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:13 | express | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:13 | express | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express ... press') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express ... press') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:23 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:23 | require | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | exceptional return of require('express') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | require('express') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | require('express') | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:13 | mongodb | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:13 | mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:13 | mongodb | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb ... ngodb') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb ... ngodb') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb ... ngodb') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:23 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:23 | require | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | exceptional return of require('mongodb') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | exceptional return of require('mongodb') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | exceptional return of require('mongodb') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | require('mongodb') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | require('mongodb') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | require('mongodb') | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:16 | bodyParser | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:16 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:16 | bodyParser | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyPar ... arser') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyPar ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyPar ... arser') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyParser | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyParser | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:26 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:26 | require | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | require ... arser') | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoCl ... oClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoCl ... oClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoCl ... oClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:27 | mongodb | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:27 | mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:27 | mongodb | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:39 | mongodb.MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:39 | mongodb.MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:39 | mongodb.MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:29:5:39 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:29:5:39 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:29:5:39 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:9 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:9 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app = express() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app = express() | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:19 | express | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:19 | express | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | exceptional return of express() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | exceptional return of express() | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | express() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | express() | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:7 | app.use | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:7 | app.use | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | app.use ... rue })) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | app.use ... rue })) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | exceptional return of app.use ... rue })) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:5:9:7 | use | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:5:9:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:5:9:7 | use | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:18 | bodyParser | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:18 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:18 | bodyParser | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:29 | bodyPar ... encoded | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:29 | bodyPar ... encoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:29 | bodyPar ... encoded | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | calleeImports | express | @@ -1457,6 +7855,12 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:20:9:29 | urlencoded | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:20:9:29 | urlencoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:20:9:29 | urlencoded | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | calleeImports | body-parser | @@ -1464,6 +7868,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | receiverName | bodyParser | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:40 | extended | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:40 | extended | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:40 | extended | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | InputAccessPathFromCallee | 0.extended | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | InputArgumentIndex | 0 | @@ -1472,6 +7885,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:8 | app.post | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | app.pos ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | app.pos ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | exceptional return of app.pos ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:5:11:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:5:11:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:5:11:8 | post | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | calleeImports | express | @@ -1479,6 +7907,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ... });\\n} | calleeImports | express | @@ -1486,11 +7934,128 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ... });\\n} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -1500,6 +8065,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n } | calleeImports | mongodb | @@ -1509,6 +8089,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1517,6 +8162,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1525,6 +8195,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1533,6 +8228,27 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title: ... y.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | stringConcatenatedWith | -endpoint- query.body.title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | InputAccessPathFromCallee | 0.title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | InputArgumentIndex | 0 | @@ -1542,6 +8258,57 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | stringConcatenatedWith | '' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1550,6 +8317,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title: ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | InputAccessPathFromCallee | 0.title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | InputArgumentIndex | 0 | @@ -1559,6 +8366,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | CalleeFlexibleAccessPath | query.body.title.substr | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1566,6 +8388,96 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof ... string" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof ... string" | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof ... string" | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof ... string" | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof ... string" | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1574,6 +8486,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | InputAccessPathFromCallee | 0.title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | InputArgumentIndex | 0 | @@ -1583,6 +8510,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1591,6 +8543,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title: ... (title) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | InputAccessPathFromCallee | 0.title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | InputArgumentIndex | 0 | @@ -1600,6 +8577,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | CalleeFlexibleAccessPath | JSON.parse | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1608,6 +8595,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:7 | app.get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:7 | app.get | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | app.get ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | app.get ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | exceptional return of app.get ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | exceptional return of app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | exceptional return of app.get ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:5:37:7 | get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:5:37:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:5:37:7 | get | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | calleeImports | express | @@ -1615,6 +8617,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ... });\\n} | calleeImports | express | @@ -1622,11 +8639,120 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ... });\\n} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | assignedToPropName | id | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n }) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -1636,6 +8762,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n } | calleeImports | mongodb | @@ -1645,6 +8781,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1653,6 +8854,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1661,6 +8887,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:8 | app.post | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | app.pos ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | app.pos ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | exceptional return of app.pos ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:5:47:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:5:47:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:5:47:8 | post | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | calleeImports | express | @@ -1668,6 +8909,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ... });\\n} | calleeImports | express | @@ -1675,11 +8931,125 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ... });\\n} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -1689,6 +9059,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n } | calleeImports | mongodb | @@ -1698,6 +9078,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1706,6 +9151,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1714,6 +9184,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:8 | app.post | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | app.pos ... \\t});\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | app.pos ... \\t});\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | app.pos ... \\t});\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | exceptional return of app.pos ... \\t});\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | exceptional return of app.pos ... \\t});\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | exceptional return of app.pos ... \\t});\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:5:58:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:5:58:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:5:58:8 | post | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | calleeImports | express | @@ -1721,6 +9206,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | calleeImports | express | @@ -1728,11 +9228,125 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -1742,6 +9356,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | calleeImports | mongodb | @@ -1751,6 +9375,86 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | CalleeFlexibleAccessPath | client.db | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1759,6 +9463,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | CalleeFlexibleAccessPath | client.db().collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1766,6 +9475,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1774,6 +9508,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:8 | app.post | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | app.pos ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | app.pos ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | exceptional return of app.pos ... });\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:5:69:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:5:69:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:5:69:8 | post | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | calleeImports | express | @@ -1781,6 +9530,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | calleeImports | express | @@ -1788,6 +9557,109 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | calleeImports | mongodb | @@ -1797,6 +9669,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | calleeImports | mongodb | @@ -1806,6 +9688,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n } | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n } | calleeImports | mongodb | @@ -1815,6 +9707,96 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n .db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n .db | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n .db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n .db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n .db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ... .count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ... .count | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ... .count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ... .count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ... .count | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ... tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ... tag }) | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ... tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ... tag }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ... tag }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ... tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ... tag }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ... tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ... tag }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ... tag }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | CalleeFlexibleAccessPath | client.db | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1823,6 +9805,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | CalleeFlexibleAccessPath | client.db().collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1830,6 +9827,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | CalleeFlexibleAccessPath | client.db().collection().count | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1837,6 +9839,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | contextSurroundingFunctionParameters | (req, res)\n(err, client) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | CalleeFlexibleAccessPath | client.db().collection().count | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | InputAccessPathFromCallee | 0.tags | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | InputArgumentIndex | 0 | @@ -1846,6 +9863,36 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | calleeImports | | @@ -1854,6 +9901,66 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n .db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n .db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n .db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n .db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n .db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ... .db() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ... .db() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ... .db() | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ... .db() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ... .db() | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ... .db() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ... .db() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ... .db() | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ... .db() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ... .db() | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ... .count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ... .count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ... .count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ... .count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ... .count | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ... tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ... tag }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ... tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ... tag }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ... tag }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ... tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ... tag }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ... tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ... tag }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ... tag }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | CalleeFlexibleAccessPath | importedDbo.db().collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | calleeImports | ./dbo.js | @@ -1862,6 +9969,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | CalleeFlexibleAccessPath | importedDbo.db().collection().count | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | calleeImports | ./dbo.js | @@ -1870,6 +9982,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | CalleeFlexibleAccessPath | importedDbo.db().collection().count | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | InputAccessPathFromCallee | 0.tags | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | InputArgumentIndex | 0 | @@ -1880,6 +10007,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:7 | app.get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:7 | app.get | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | app.get ... am);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | app.get ... am);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | app.get ... am);\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | exceptional return of app.get ... am);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | exceptional return of app.get ... am);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | exceptional return of app.get ... am);\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:5:89:7 | get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:5:89:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:5:89:7 | get | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | calleeImports | express | @@ -1887,6 +10029,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | calleeImports | express | @@ -1894,11 +10046,192 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | CalleeFlexibleAccessPath | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | enclosingFunctionBody | req res useParams req param | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | functio ... });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | functio ... });\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | functio ... });\\n} | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | contextSurroundingFunctionParameters | (params) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | enclosingFunctionName | useParams | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | assignedToPropName | id | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n }) | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n }) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n }) | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n }) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n }) | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | contextSurroundingFunctionParameters | (params) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -1908,6 +10241,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | enclosingFunctionName | useParams | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n } | calleeImports | mongodb | @@ -1917,6 +10260,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n } | enclosingFunctionName | useParams | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1925,6 +10333,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | enclosingFunctionName | useParams | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | contextSurroundingFunctionParameters | (params)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | enclosingFunctionName | useParams | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1933,6 +10366,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | enclosingFunctionName | useParams | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:3 | app | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:8 | app.post | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | app.pos ... ry);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | app.pos ... ry);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | app.pos ... ry);\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | exceptional return of app.pos ... ry);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | exceptional return of app.pos ... ry);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | exceptional return of app.pos ... ry);\\n}) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:5:102:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:5:102:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:5:102:8 | post | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | calleeImports | express | @@ -1940,6 +10388,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | calleeImports | express | @@ -1947,11 +10405,197 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | CalleeFlexibleAccessPath | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | enclosingFunctionBody | req res useQuery req query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | functio ... });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | functio ... });\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | functio ... });\\n} | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | contextSurroundingFunctionParameters | (queries) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | enclosingFunctionName | useQuery | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n }) | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n }) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n }) | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n }) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n }) | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n }) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | contextSurroundingFunctionParameters | (queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -1961,6 +10605,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | enclosingFunctionName | useQuery | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n } | calleeImports | mongodb | @@ -1970,6 +10624,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n } | enclosingFunctionName | useQuery | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n } | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1978,6 +10697,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | enclosingFunctionName | useQuery | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | contextSurroundingFunctionParameters | (queries)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | enclosingFunctionName | useQuery | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) | @@ -1986,24 +10730,145 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | enclosingFunctionName | useQuery | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | fileImports | ./dbo.js body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:0 | this | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | require | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:13 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:13 | express | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express ... press') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express ... press') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:23 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:23 | require | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | exceptional return of require('express') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | require('express') | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:13 | mongodb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:13 | mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:13 | mongodb | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb ... ngodb') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb ... ngodb') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb ... ngodb') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:23 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:23 | require | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | exceptional return of require('mongodb') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | exceptional return of require('mongodb') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | exceptional return of require('mongodb') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | require('mongodb') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | require('mongodb') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | require('mongodb') | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:16 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:16 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:16 | bodyParser | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyPar ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyPar ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyPar ... arser') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyParser | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:26 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:26 | require | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | require ... arser') | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoCl ... oClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoCl ... oClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoCl ... oClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:27 | mongodb | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:27 | mongodb | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:27 | mongodb | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:39 | mongodb.MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:39 | mongodb.MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:39 | mongodb.MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:29:5:39 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:29:5:39 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:29:5:39 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:9 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:9 | app | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app = express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app = express() | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:19 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:19 | express | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | exceptional return of express() | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | express() | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:3 | app | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:7 | app.use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:7 | app.use | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | app.use ... lse })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | app.use ... lse })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | app.use ... lse })) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | exceptional return of app.use ... lse })) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | exceptional return of app.use ... lse })) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | exceptional return of app.use ... lse })) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:5:9:7 | use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:5:9:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:5:9:7 | use | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:18 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:18 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:18 | bodyParser | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:29 | bodyPar ... encoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:29 | bodyPar ... encoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:29 | bodyPar ... encoded | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | calleeImports | express | @@ -2011,6 +10876,12 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | exceptional return of bodyPar ... alse }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | exceptional return of bodyPar ... alse }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | exceptional return of bodyPar ... alse }) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:20:9:29 | urlencoded | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:20:9:29 | urlencoded | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:20:9:29 | urlencoded | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | calleeImports | body-parser | @@ -2018,6 +10889,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | receiverName | bodyParser | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:40 | extended | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:40 | extended | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:40 | extended | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | CalleeFlexibleAccessPath | bodyParser.urlencoded | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | InputAccessPathFromCallee | 0.extended | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | InputArgumentIndex | 0 | @@ -2026,6 +10906,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:3 | app | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:8 | app.post | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | app.pos ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | app.pos ... });\\n}) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | exceptional return of app.pos ... });\\n}) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:5:11:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:5:11:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:5:11:8 | post | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | calleeImports | express | @@ -2033,6 +10928,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ... });\\n} | calleeImports | express | @@ -2040,11 +10950,125 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ... });\\n} | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n }) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n }) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -2054,6 +11078,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n } | calleeImports | mongodb | @@ -2063,6 +11097,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n } | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | contextFunctionInterfaces | | @@ -2071,6 +11170,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | contextFunctionInterfaces | | @@ -2079,6 +11203,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:3 | app | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:8 | app.post | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | app.pos ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | app.pos ... });\\n}) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | exceptional return of app.pos ... });\\n}) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:5:22:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:5:22:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:5:22:8 | post | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | calleeImports | express | @@ -2086,6 +11225,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ... });\\n} | calleeImports | express | @@ -2093,11 +11247,125 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ... });\\n} | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n }) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n }) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | calleeImports | mongodb | @@ -2107,6 +11375,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n } | CalleeFlexibleAccessPath | MongoClient.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n } | calleeImports | mongodb | @@ -2116,6 +11394,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n } | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n } | receiverName | MongoClient | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | CalleeFlexibleAccessPath | db.collection | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | contextFunctionInterfaces | | @@ -2124,6 +11467,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | fileImports | body-parser express mongodb | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | CalleeFlexibleAccessPath | doc.find | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | contextFunctionInterfaces | | @@ -2132,24 +11500,131 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | fileImports | body-parser express mongodb | | autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | receiverName | doc | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:0 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:0 | this | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:12 | 'use strict' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:12 | 'use strict' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:12 | 'use strict' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:13 | Express | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:13 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:13 | Express | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express ... press') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express ... press') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:23 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:23 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | exceptional return of require('express') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | exceptional return of require('express') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | require('express') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | require('express') | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:16 | BodyParser | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:16 | BodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:16 | BodyParser | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyPar ... arser') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyPar ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyPar ... arser') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyParser | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyParser | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:26 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:26 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | require ... arser') | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoos ... goose') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoos ... goose') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoos ... goose') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:24 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:24 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | exceptional return of require('mongoose') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | exceptional return of require('mongoose') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | exceptional return of require('mongoose') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | require('mongoose') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | require('mongoose') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | require('mongoose') | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:8 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:8 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:8 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:16 | Mongoose.Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:16 | Mongoose.Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:16 | Mongoose.Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:33 | Mongoos ... Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:33 | Mongoos ... Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:33 | Mongoos ... Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:10:5:16 | Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:10:5:16 | Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:10:5:16 | Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:25 | global | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:25 | global | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:25 | global | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | assignedToPropName | Promise | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:27:5:33 | Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:27:5:33 | Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:27:5:33 | Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:8 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:8 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:8 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:16 | Mongoose.connect | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:16 | Mongoose.connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:16 | Mongoose.connect | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | Mongoos ... able1') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | Mongoos ... able1') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | Mongoos ... able1') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | exceptional return of Mongoos ... able1') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:10:6:16 | connect | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:10:6:16 | connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:10:6:16 | connect | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | CalleeFlexibleAccessPath | Mongoose.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | calleeImports | mongoose | @@ -2157,6 +11632,45 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | receiverName | Mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:9 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:9 | app | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app = Express() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app = Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app = Express() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:19 | Express | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:19 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:19 | Express | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | Express() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | Express() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | exceptional return of Express() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | exceptional return of Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | exceptional return of Express() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:3 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:3 | app | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:7 | app.use | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:7 | app.use | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | app.use ... json()) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | app.use ... json()) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | exceptional return of app.use ... json()) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | exceptional return of app.use ... json()) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:5:9:7 | use | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:5:9:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:5:9:7 | use | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:18 | BodyParser | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:18 | BodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:18 | BodyParser | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:23 | BodyParser.json | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:23 | BodyParser.json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:23 | BodyParser.json | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | calleeImports | express | @@ -2164,6 +11678,37 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | exceptional return of BodyParser.json() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | exceptional return of BodyParser.json() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | exceptional return of BodyParser.json() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:20:9:23 | json | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:20:9:23 | json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:20:9:23 | json | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Documen ... ring\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Documen ... ring\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Documen ... ring\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:25 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:25 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:25 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:31 | Mongoose.model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:31 | Mongoose.model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:31 | Mongoose.model | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | Mongoos ... ring\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | Mongoos ... ring\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | Mongoos ... ring\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | exceptional return of Mongoos ... ring\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | exceptional return of Mongoos ... ring\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | exceptional return of Mongoos ... ring\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:27:11:31 | model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:27:11:31 | model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:27:11:31 | model | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | calleeImports | mongoose | @@ -2178,6 +11723,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n t ... tring\\n} | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n t ... tring\\n} | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n t ... tring\\n} | receiverName | Mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:12:9 | title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:12:9 | title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:12:9 | title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title: ... e\\n } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title: ... e\\n } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title: ... e\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title: ... e\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title: ... e\\n } | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title: ... e\\n } | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n ... e\\n } | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n ... e\\n } | InputAccessPathFromCallee | 1.title | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n ... e\\n } | InputArgumentIndex | 1 | @@ -2186,6 +11740,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n ... e\\n } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n ... e\\n } | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n ... e\\n } | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:12 | type | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:12 | type | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:12 | type | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | InputAccessPathFromCallee | 1.title.type | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | InputArgumentIndex | 1 | @@ -2194,6 +11757,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:14 | unique | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:14 | unique | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:14 | unique | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | InputAccessPathFromCallee | 1.title.unique | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | InputArgumentIndex | 1 | @@ -2202,6 +11774,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:8 | type | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:8 | type | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:8 | type | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | InputAccessPathFromCallee | 1.type | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | InputArgumentIndex | 1 | @@ -2210,6 +11791,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:3 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:3 | app | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:8 | app.post | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:8 | app.post | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | app.pos ... / OK\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | app.pos ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | app.pos ... / OK\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | exceptional return of app.pos ... / OK\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | exceptional return of app.pos ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | exceptional return of app.pos ... / OK\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:5:19:8 | post | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:5:19:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:5:19:8 | post | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | calleeImports | express | @@ -2217,6 +11813,22 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -2224,10 +11836,101 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | CalleeFlexibleAccessPath | Document.aggregate | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | calleeImports | mongoose | @@ -2237,9 +11940,33 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | receiverName | Document | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | CalleeFlexibleAccessPath | Document.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | calleeImports | mongoose | @@ -2248,6 +11975,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | CalleeFlexibleAccessPath | Document.deleteMany | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | calleeImports | mongoose | @@ -2256,6 +12003,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | CalleeFlexibleAccessPath | Document.deleteOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | calleeImports | mongoose | @@ -2264,6 +12031,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ... query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ... query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | CalleeFlexibleAccessPath | Document.distinct | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | calleeImports | mongoose | @@ -2280,6 +12067,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | calleeImports | mongoose | @@ -2288,6 +12095,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | calleeImports | mongoose | @@ -2296,6 +12123,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | CalleeFlexibleAccessPath | Document.findOneAndDelete | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | calleeImports | mongoose | @@ -2304,6 +12151,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | CalleeFlexibleAccessPath | Document.findOneAndRemove | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | calleeImports | mongoose | @@ -2312,6 +12179,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | CalleeFlexibleAccessPath | Document.findOneAndUpdate | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | calleeImports | mongoose | @@ -2320,6 +12207,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | CalleeFlexibleAccessPath | Document.replaceOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | calleeImports | mongoose | @@ -2328,6 +12235,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | CalleeFlexibleAccessPath | Document.update | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | calleeImports | mongoose | @@ -2336,6 +12263,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | CalleeFlexibleAccessPath | Document.updateMany | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | calleeImports | mongoose | @@ -2344,6 +12291,38 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | CalleeFlexibleAccessPath | Document.updateOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | calleeImports | mongoose | @@ -2352,6 +12331,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | CalleeFlexibleAccessPath | Document.updateOne().then | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | calleeImports | mongoose | @@ -2359,6 +12342,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | CalleeFlexibleAccessPath | Document.findByIdAndUpdate | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | calleeImports | mongoose | @@ -2375,6 +12378,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | CalleeFlexibleAccessPath | Document.findByIdAndUpdate | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | calleeImports | mongoose | @@ -2383,6 +12398,42 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ... query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ... query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | CalleeFlexibleAccessPath | Mongoose.Query | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | calleeImports | mongoose | @@ -2404,6 +12455,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | CalleeFlexibleAccessPath | Mongoose.Query().and | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | calleeImports | mongoose | @@ -2411,6 +12466,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | CalleeFlexibleAccessPath | Mongoose.Query().and | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | calleeImports | mongoose | @@ -2418,6 +12485,114 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | contextSurroundingFunctionParameters | (req, res)\n() | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ... .where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ... .where | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ... .where | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ... .where | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ... query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ... query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | CalleeFlexibleAccessPath | Document.where | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | calleeImports | mongoose | @@ -2426,6 +12601,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | CalleeFlexibleAccessPath | Document.where().where | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | calleeImports | mongoose | @@ -2433,6 +12612,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | CalleeFlexibleAccessPath | Document.where().where().and | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | calleeImports | mongoose | @@ -2440,6 +12623,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | CalleeFlexibleAccessPath | Document.where().where().and().or | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | calleeImports | mongoose | @@ -2447,6 +12634,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | CalleeFlexibleAccessPath | Document.where().where().and().or().distinct | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | calleeImports | mongoose | @@ -2461,6 +12652,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | CalleeFlexibleAccessPath | Document.where().where().and().or().distinct().comment | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | calleeImports | mongoose | @@ -2468,6 +12663,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | CalleeFlexibleAccessPath | Document.where().where().and().or().distinct().comment().count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | calleeImports | mongoose | @@ -2475,6 +12674,42 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | CalleeFlexibleAccessPath | Mongoose.createConnection | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | calleeImports | mongoose | @@ -2483,6 +12718,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | receiverName | Mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | CalleeFlexibleAccessPath | Mongoose.createConnection().count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | calleeImports | mongoose | @@ -2490,6 +12729,50 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | CalleeFlexibleAccessPath | Mongoose.createConnection | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | calleeImports | mongoose | @@ -2498,6 +12781,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | receiverName | Mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | CalleeFlexibleAccessPath | Mongoose.createConnection().model | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | calleeImports | mongoose | @@ -2505,6 +12792,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | CalleeFlexibleAccessPath | Mongoose.createConnection().model().count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | calleeImports | mongoose | @@ -2512,6 +12803,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | CalleeFlexibleAccessPath | Mongoose.createConnection | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | calleeImports | mongoose | @@ -2520,6 +12851,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | receiverName | Mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | CalleeFlexibleAccessPath | Mongoose.createConnection().models.?.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | calleeImports | mongoose | @@ -2527,6 +12870,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | calleeImports | mongoose | @@ -2535,6 +12898,14 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | calleeImports | mongoose | @@ -2543,6 +12914,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | CalleeFlexibleAccessPath | res.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2550,6 +12961,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | receiverName | res | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | calleeImports | mongoose | @@ -2558,6 +12989,14 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | calleeImports | mongoose | @@ -2566,6 +13005,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | CalleeFlexibleAccessPath | err.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2573,6 +13052,38 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | receiverName | err | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | calleeImports | mongoose | @@ -2581,6 +13092,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne().exec | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | calleeImports | mongoose | @@ -2588,6 +13111,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | CalleeFlexibleAccessPath | res.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2595,6 +13158,38 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | receiverName | res | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | calleeImports | mongoose | @@ -2603,6 +13198,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne().exec | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | calleeImports | mongoose | @@ -2610,6 +13217,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | CalleeFlexibleAccessPath | err.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2617,6 +13264,38 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | receiverName | err | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | calleeImports | mongoose | @@ -2625,6 +13304,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | CalleeFlexibleAccessPath | Document.findOne().then | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | calleeImports | mongoose | @@ -2632,6 +13323,42 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | CalleeFlexibleAccessPath | res.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2639,6 +13366,38 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | receiverName | res | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | calleeImports | mongoose | @@ -2647,6 +13406,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | CalleeFlexibleAccessPath | Document.findOne().then | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | calleeImports | mongoose | @@ -2654,6 +13417,14 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | CalleeFlexibleAccessPath | Document.findOne().then | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | calleeImports | mongoose | @@ -2661,6 +13432,42 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | CalleeFlexibleAccessPath | err.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2668,6 +13475,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | receiverName | err | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | calleeImports | mongoose | @@ -2676,6 +13503,14 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | calleeImports | mongoose | @@ -2684,12 +13519,80 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | CalleeFlexibleAccessPath | res.?.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | calleeImports | mongoose | @@ -2698,6 +13601,14 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | calleeImports | mongoose | @@ -2706,6 +13617,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | CalleeFlexibleAccessPath | err.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2713,6 +13664,38 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | receiverName | err | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | calleeImports | mongoose | @@ -2721,6 +13704,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find().exec | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | calleeImports | mongoose | @@ -2728,12 +13723,92 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | CalleeFlexibleAccessPath | res.?.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | calleeImports | mongoose | @@ -2742,6 +13817,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find().exec | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | calleeImports | mongoose | @@ -2749,6 +13836,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | CalleeFlexibleAccessPath | err.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2756,6 +13883,38 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | receiverName | err | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | calleeImports | mongoose | @@ -2764,6 +13923,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | CalleeFlexibleAccessPath | Document.find().then | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | calleeImports | mongoose | @@ -2771,12 +13942,88 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | contextSurroundingFunctionParameters | (req, res)\n(res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | CalleeFlexibleAccessPath | res.?.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | contextSurroundingFunctionParameters | (req, res)\n(res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | calleeImports | mongoose | @@ -2785,6 +14032,10 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | CalleeFlexibleAccessPath | Document.find().then | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | calleeImports | mongoose | @@ -2792,6 +14043,14 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | CalleeFlexibleAccessPath | Document.find().then | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | calleeImports | mongoose | @@ -2799,6 +14058,42 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | CalleeFlexibleAccessPath | err.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2806,6 +14101,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | receiverName | err | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | CalleeFlexibleAccessPath | Document.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | calleeImports | mongoose | @@ -2814,6 +14129,14 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | calleeImports | mongoose | @@ -2822,6 +14145,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | CalleeFlexibleAccessPath | res.count | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2829,6 +14192,70 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | receiverName | res | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | contextSurroundingFunctionParameters | (X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | CalleeFlexibleAccessPath | Mongoose.Query | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | calleeImports | mongoose | @@ -2850,6 +14277,116 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | contextSurroundingFunctionParameters | (X, Y, query) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ... query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ... query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ... query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ... query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ... query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | CalleeFlexibleAccessPath | innocent | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | CalleeFlexibleAccessPath | innocent | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | InputArgumentIndex | 1 | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | CalleeFlexibleAccessPath | innocent | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | InputArgumentIndex | 2 | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | CalleeFlexibleAccessPath | C | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | @@ -2868,6 +14405,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | CalleeFlexibleAccessPath | Document.findOneAndUpdate | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | calleeImports | mongoose | @@ -2884,6 +14441,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | CalleeFlexibleAccessPath | Document.findOneAndUpdate | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | calleeImports | mongoose | @@ -2892,6 +14461,94 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond = ... ry.cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond = ... ry.cond | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond = ... ry.cond | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond = ... ry.cond | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | CalleeFlexibleAccessPath | Document.deleteMany | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | calleeImports | mongoose | @@ -2900,6 +14557,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | CalleeFlexibleAccessPath | Document.deleteOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | calleeImports | mongoose | @@ -2908,6 +14585,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | CalleeFlexibleAccessPath | Document.geoSearch | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | calleeImports | mongoose | @@ -2916,6 +14613,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | CalleeFlexibleAccessPath | Document.remove | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | calleeImports | mongoose | @@ -2924,6 +14641,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | CalleeFlexibleAccessPath | Document.replaceOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | calleeImports | mongoose | @@ -2940,6 +14677,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | calleeImports | mongoose | @@ -2948,6 +14705,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | CalleeFlexibleAccessPath | Document.findOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | calleeImports | mongoose | @@ -2956,6 +14733,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | CalleeFlexibleAccessPath | Document.findById | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | calleeImports | mongoose | @@ -2964,6 +14761,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | CalleeFlexibleAccessPath | Document.findOneAndDelete | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | calleeImports | mongoose | @@ -2972,6 +14789,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | CalleeFlexibleAccessPath | Document.findOneAndRemove | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | calleeImports | mongoose | @@ -2980,6 +14817,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | CalleeFlexibleAccessPath | Document.findOneAndUpdate | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | calleeImports | mongoose | @@ -2996,6 +14853,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | CalleeFlexibleAccessPath | Document.update | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | calleeImports | mongoose | @@ -3012,6 +14889,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | CalleeFlexibleAccessPath | Document.updateMany | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | calleeImports | mongoose | @@ -3028,6 +14925,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | CalleeFlexibleAccessPath | Document.updateOne | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | calleeImports | mongoose | @@ -3044,6 +14961,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | calleeImports | mongoose | @@ -3052,6 +14989,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | InputAccessPathFromCallee | 0._id | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | InputArgumentIndex | 0 | @@ -3061,6 +15010,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | calleeImports | mongoose | @@ -3069,6 +15038,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | InputAccessPathFromCallee | 0._id | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | InputArgumentIndex | 0 | @@ -3078,6 +15059,18 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | InputAccessPathFromCallee | 0._id.$eq | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | InputArgumentIndex | 0 | @@ -3087,24 +15080,124 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:0 | this | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | Document | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:12 | 'use strict' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:12 | 'use strict' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:12 | 'use strict' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:13 | Express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:13 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:13 | Express | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express ... press') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express ... press') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:23 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:23 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | exceptional return of require('express') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | require('express') | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:16 | BodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:16 | BodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:16 | BodyParser | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:41 | BodyPar ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:41 | BodyPar ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:41 | BodyPar ... arser') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:26 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:26 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | require ... arser') | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:14 | Mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:14 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:14 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoos ... goose') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoos ... goose') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoos ... goose') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:24 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:24 | require | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | exceptional return of require('mongoose') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | exceptional return of require('mongoose') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | exceptional return of require('mongoose') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | require('mongoose') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | require('mongoose') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | require('mongoose') | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:8 | Mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:8 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:8 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:16 | Mongoose.Promise | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:16 | Mongoose.Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:16 | Mongoose.Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:33 | Mongoos ... Promise | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:33 | Mongoos ... Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:33 | Mongoos ... Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:10:5:16 | Promise | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:10:5:16 | Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:10:5:16 | Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:25 | global | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:25 | global | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:25 | global | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | assignedToPropName | Promise | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:27:5:33 | Promise | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:27:5:33 | Promise | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:27:5:33 | Promise | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:8 | Mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:8 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:8 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:16 | Mongoose.connect | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:16 | Mongoose.connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:16 | Mongoose.connect | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | Mongoos ... able1') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | Mongoos ... able1') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | Mongoos ... able1') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | exceptional return of Mongoos ... able1') | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:10:6:16 | connect | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:10:6:16 | connect | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:10:6:16 | connect | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | CalleeFlexibleAccessPath | Mongoose.connect | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | calleeImports | mongoose | @@ -3112,6 +15205,49 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | receiverName | Mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:9 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:9 | app | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app = Express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app = Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app = Express() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:19 | Express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:19 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:19 | Express | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | Express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | Express() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | exceptional return of Express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | exceptional return of Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | exceptional return of Express() | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Documen ... ring\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Documen ... ring\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Documen ... ring\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Document | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:25 | Mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:25 | Mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:25 | Mongoose | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:31 | Mongoose.model | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:31 | Mongoose.model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:31 | Mongoose.model | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | Mongoos ... ring\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | Mongoos ... ring\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | Mongoos ... ring\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | exceptional return of Mongoos ... ring\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | exceptional return of Mongoos ... ring\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | exceptional return of Mongoos ... ring\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:27:10:31 | model | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:27:10:31 | model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:27:10:31 | model | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | calleeImports | mongoose | @@ -3126,6 +15262,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n t ... tring\\n} | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n t ... tring\\n} | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n t ... tring\\n} | receiverName | Mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:11:9 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:11:9 | title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:11:9 | title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title: ... e\\n } | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title: ... e\\n } | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title: ... e\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title: ... e\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title: ... e\\n } | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title: ... e\\n } | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n ... e\\n } | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n ... e\\n } | InputAccessPathFromCallee | 1.title | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n ... e\\n } | InputArgumentIndex | 1 | @@ -3134,6 +15279,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n ... e\\n } | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n ... e\\n } | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n ... e\\n } | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:12 | type | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:12 | type | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:12 | type | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | InputAccessPathFromCallee | 1.title.type | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | InputArgumentIndex | 1 | @@ -3142,6 +15296,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:14 | unique | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:14 | unique | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:14 | unique | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | InputAccessPathFromCallee | 1.title.unique | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | InputArgumentIndex | 1 | @@ -3150,6 +15313,15 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:8 | type | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:8 | type | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:8 | type | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | CalleeFlexibleAccessPath | Mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | InputAccessPathFromCallee | 1.type | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | InputArgumentIndex | 1 | @@ -3158,6 +15330,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:3 | app | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:7 | app.get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:7 | app.get | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | app.get ... ry);\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | app.get ... ry);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | app.get ... ry);\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | exceptional return of app.get ... ry);\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | exceptional return of app.get ... ry);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | exceptional return of app.get ... ry);\\n}) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:5:18:7 | get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:5:18:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:5:18:7 | get | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | calleeImports | express | @@ -3165,6 +15352,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | calleeImports | express | @@ -3172,11 +15369,112 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | assignedToPropName | title | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | CalleeFlexibleAccessPath | JSON.parse | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | contextFunctionInterfaces | | @@ -3185,6 +15483,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | fileImports | body-parser express mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | CalleeFlexibleAccessPath | Document.find | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | calleeImports | mongoose | @@ -3194,6 +15532,45 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | fileImports | body-parser express mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | receiverName | Document | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:0 | this | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:32 | import ... goose'; | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:32 | import ... goose'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:32 | import ... goose'; | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:22:1:31 | 'mongoose' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:22:1:31 | 'mongoose' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:22:1:31 | 'mongoose' | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:20 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:20 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:20 | MyModel | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:61 | MyModel ... hema()) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:61 | MyModel ... hema()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:61 | MyModel ... hema()) | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:31 | mongoose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:31 | mongoose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:31 | mongoose | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:37 | mongoose.model | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:37 | mongoose.model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:37 | mongoose.model | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | exceptional return of mongoos ... hema()) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | exceptional return of mongoos ... hema()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | exceptional return of mongoos ... hema()) | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | mongoos ... hema()) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | mongoos ... hema()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | mongoos ... hema()) | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:33:3:37 | model | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:33:3:37 | model | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:33:3:37 | model | fileImports | mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | CalleeFlexibleAccessPath | mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | calleeImports | mongoose | @@ -3201,6 +15578,12 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | fileImports | mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | receiverName | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:58 | getSchema | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:58 | getSchema | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:58 | getSchema | fileImports | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | exceptional return of getSchema() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | exceptional return of getSchema() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | exceptional return of getSchema() | fileImports | mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | CalleeFlexibleAccessPath | mongoose.model | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | calleeImports | mongoose | @@ -3208,6 +15591,100 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | fileImports | mongoose | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | receiverName | mongoose | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:0 | this | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:1 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:1 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:1 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:42 | import ... Model'; | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:42 | import ... Model'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:42 | import ... Model'; | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:25:1:41 | './mongooseModel' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:25:1:41 | './mongooseModel' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:25:1:41 | './mongooseModel' | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:1:2:30 | import ... press'; | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:1:2:30 | import ... press'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:1:2:30 | import ... press'; | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:21:2:29 | 'express' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:21:2:29 | 'express' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:21:2:29 | 'express' | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:1:3:37 | import ... arser'; | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:1:3:37 | import ... arser'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:1:3:37 | import ... arser'; | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:24:3:36 | 'body-parser' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:24:3:36 | 'body-parser' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:24:3:36 | 'body-parser' | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:7 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:7 | app | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app = express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app = express() | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:17 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:17 | express | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | exceptional return of express() | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | express() | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:3 | app | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:7 | app.use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:7 | app.use | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | app.use ... json()) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | app.use ... json()) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | exceptional return of app.use ... json()) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | exceptional return of app.use ... json()) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:5:7:7 | use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:5:7:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:5:7:7 | use | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:18 | bodyParser | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:18 | bodyParser | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:18 | bodyParser | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:23 | bodyParser.json | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:23 | bodyParser.json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:23 | bodyParser.json | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | calleeImports | express | @@ -3215,6 +15692,27 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | exceptional return of bodyParser.json() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | exceptional return of bodyParser.json() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | exceptional return of bodyParser.json() | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:20:7:23 | json | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:20:7:23 | json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:20:7:23 | json | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:3 | app | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:8 | app.post | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | app.pos ... / OK\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | app.pos ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | app.pos ... / OK\\n}) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | exceptional return of app.pos ... / OK\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | exceptional return of app.pos ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | exceptional return of app.pos ... / OK\\n}) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:5:9:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:5:9:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:5:9:8 | post | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | calleeImports | express | @@ -3222,6 +15720,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -3229,6 +15737,81 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | CalleeFlexibleAccessPath | JSON.parse | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | contextFunctionInterfaces | | @@ -3237,6 +15820,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | receiverName | JSON | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | CalleeFlexibleAccessPath | MyModel.find | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | calleeImports | ./mongooseModel | @@ -3246,6 +15864,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | receiverName | MyModel | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | CalleeFlexibleAccessPath | MyModel.find | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | InputAccessPathFromCallee | 0.id | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | InputArgumentIndex | 0 | @@ -3256,6 +15889,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | CalleeFlexibleAccessPath | MyModel.find | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | calleeImports | ./mongooseModel | @@ -3265,6 +15923,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | receiverName | MyModel | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | CalleeFlexibleAccessPath | MyModel.find | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | InputAccessPathFromCallee | 0.id | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | InputArgumentIndex | 0 | @@ -3275,6 +15958,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | CalleeFlexibleAccessPath | MyModel.find | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | calleeImports | ./mongooseModel | @@ -3284,6 +16002,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | receiverName | MyModel | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | fileImports | ./mongooseModel body-parser express | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | CalleeFlexibleAccessPath | MyModel.find | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | InputAccessPathFromCallee | 0.id | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | InputArgumentIndex | 0 | @@ -3294,18 +16027,126 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | stringConcatenatedWith | -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | fileImports | ./mongooseModel body-parser express | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:0 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:0 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | pool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | require | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | require | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:9 | app | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:9 | app | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app = r ... ess")() | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app = r ... ess")() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app = r ... ess")() | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:19 | require | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:19 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:19 | require | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | exceptional return of require("express") | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | exceptional return of require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | exceptional return of require("express") | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | require("express") | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | require("express") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | require("express") | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | exceptional return of require("express")() | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | exceptional return of require("express")() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | exceptional return of require("express")() | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | require("express")() | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | require("express")() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | require("express")() | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | contextFunctionInterfaces | handler(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:11 | mysql | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:11 | mysql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:11 | mysql | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql = ... mysql') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql = ... mysql') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql = ... mysql') | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:21 | require | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:21 | require | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | exceptional return of require('mysql') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | exceptional return of require('mysql') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | exceptional return of require('mysql') | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | require('mysql') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | require('mysql') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | require('mysql') | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | contextFunctionInterfaces | handler(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool = ... nfig()) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool = ... nfig()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool = ... nfig()) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:18 | mysql | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:18 | mysql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:18 | mysql | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:29 | mysql.createPool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:29 | mysql.createPool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:29 | mysql.createPool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | exceptional return of mysql.c ... nfig()) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | exceptional return of mysql.c ... nfig()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | exceptional return of mysql.c ... nfig()) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | mysql.c ... nfig()) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | mysql.c ... nfig()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | mysql.c ... nfig()) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:20:3:29 | createPool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:20:3:29 | createPool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:20:3:29 | createPool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:39 | getConfig | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:39 | getConfig | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:39 | getConfig | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | exceptional return of getConfig() | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | exceptional return of getConfig() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | exceptional return of getConfig() | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | CalleeFlexibleAccessPath | mysql.createPool | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | calleeImports | mysql | @@ -3313,6 +16154,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | receiverName | mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:3 | app | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:3 | app | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:7 | app.get | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:7 | app.get | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | app.get ... });\\n}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | app.get ... });\\n}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | exceptional return of app.get ... });\\n}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | exceptional return of app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | exceptional return of app.get ... });\\n}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:5:5:7 | get | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:5:5:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:5:5:7 | get | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | calleeImports | express | @@ -3320,6 +16176,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ... });\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ... });\\n} | calleeImports | express | @@ -3327,6 +16208,119 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ... });\\n} | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ... });\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp = ... s.value | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp = ... s.value | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp = ... s.value | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp = ... s.value | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp = ... s.value | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n }) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n }) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | pool.getConnection | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n } | calleeImports | mysql | @@ -3336,6 +16330,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n } | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n } | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n } | receiverName | pool | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n ... } | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n ... } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n ... } | contextFunctionInterfaces | handler(req, res) | @@ -3344,6 +16383,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n ... } | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n ... } | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n ... } | receiverName | connection | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | InputAccessPathFromCallee | 0.sql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | InputArgumentIndex | 0 | @@ -3353,6 +16407,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | InputAccessPathFromCallee | 0.values | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | InputArgumentIndex | 0 | @@ -3363,10 +16432,30 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | contextFunctionInterfaces | handler(req, res) | @@ -3375,6 +16464,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | receiverName | connection | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n }) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n }) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | pool.getConnection | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n } | calleeImports | mysql | @@ -3384,6 +16538,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n } | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n } | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n } | receiverName | pool | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n ... } | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n ... } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n ... } | contextFunctionInterfaces | handler(req, res) | @@ -3392,6 +16591,27 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n ... } | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n ... } | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n ... } | receiverName | connection | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ... + temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | stringConcatenatedWith | -endpoint- temp | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ... + temp | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ... + temp | InputAccessPathFromCallee | 0.sql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ... + temp | InputArgumentIndex | 0 | @@ -3401,6 +16621,27 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ... + temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ... + temp | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ... + temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | stringConcatenatedWith | 'SELECT * FROM `books` WHERE `author` = ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | contextFunctionInterfaces | handler(req, res) | @@ -3409,6 +16650,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | receiverName | connection | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n }) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n }) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | pool.getConnection | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n } | calleeImports | mysql | @@ -3418,6 +16724,57 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n } | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n } | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n } | receiverName | pool | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | stringConcatenatedWith | -endpoint- temp | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ... + temp | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ... + temp | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ... + temp | contextFunctionInterfaces | handler(req, res) | @@ -3426,6 +16783,27 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ... + temp | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ... + temp | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ... + temp | receiverName | connection | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | stringConcatenatedWith | 'SELECT * FROM `books` WHERE `author` = ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | CalleeFlexibleAccessPath | connection.query | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | contextFunctionInterfaces | handler(req, res) | @@ -3434,6 +16812,229 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | fileImports | express mysql | | autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | receiverName | connection | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` = temp error results fields | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | fileImports | express mysql | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:0 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:0 | this | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | require | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | require | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:39 | import ... omise"; | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:39 | import ... omise"; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:39 | import ... omise"; | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:27:1:38 | "pg-promise" | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:27:1:38 | "pg-promise" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:27:1:38 | "pg-promise" | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | class F ... ;\\n }\\n} | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | class F ... ;\\n }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | class F ... ;\\n }\\n} | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | assignedToPropName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | enclosingFunctionName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | contextSurroundingFunctionParameters | () | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | enclosingFunctionName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | enclosingFunctionName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | enclosingFunctionName | constructor | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:11 | onRequest | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:11 | onRequest | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:11 | onRequest | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | assignedToPropName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n } | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | CalleeFlexibleAccessPath | this.db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | contextFunctionInterfaces | constructor()\nonRequest(req, res) | @@ -3441,48 +17042,330 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | enclosingFunctionBody | req res taint req params x db one taint res end | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | enclosingFunctionName | onRequest | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | enclosingFunctionBody | req res taint req params x db one taint res end | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | enclosingFunctionName | onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:7 | require | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:7 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:7 | require | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | exceptional return of require('express') | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | exceptional return of require('express') | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | require('express') | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | require('express') | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | exceptional return of require('express')() | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | exceptional return of require('express')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | exceptional return of require('express')() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | require('express')() | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | require('express')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | require('express')() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:24 | require ... )().get | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:24 | require ... )().get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:24 | require ... )().get | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | exceptional return of require ... , res)) | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | exceptional return of require ... , res)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | exceptional return of require ... , res)) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | require ... , res)) | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | require ... , res)) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | require ... , res)) | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | contextFunctionInterfaces | constructor()\nonRequest(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:22:13:24 | get | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:22:13:24 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:22:13:24 | get | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | CalleeFlexibleAccessPath | import(!)().get | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | calleeImports | express | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | contextFunctionInterfaces | constructor()\nonRequest(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | CalleeFlexibleAccessPath | import(!)().get | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | calleeImports | express | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | contextFunctionInterfaces | constructor()\nonRequest(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | CalleeFlexibleAccessPath | Foo().onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | CalleeFlexibleAccessPath | Foo().onRequest | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | InputArgumentIndex | 1 | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | enclosingFunctionBody | req res Foo onRequest req res | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:0 | this | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:0 | this | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | pgp | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | pgp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | pgp | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | require | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | require | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp = r ... ise')() | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp = r ... ise')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp = r ... ise')() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:19 | require | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:19 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:19 | require | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | exceptional return of require ... omise') | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | exceptional return of require ... omise') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | exceptional return of require ... omise') | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | require ... omise') | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | require ... omise') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | require ... omise') | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | exceptional return of require ... ise')() | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | exceptional return of require ... ise')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | exceptional return of require ... ise')() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | require ... ise')() | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | require ... ise')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | require ... ise')() | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | contextFunctionInterfaces | cnd(t) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:7 | require | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:7 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:7 | require | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | exceptional return of require('express') | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | exceptional return of require('express') | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | require('express') | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | require('express') | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | exceptional return of require('express')() | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | exceptional return of require('express')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | exceptional return of require('express')() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | require('express')() | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | require('express')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | require('express')() | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:24 | require ... )().get | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:24 | require ... )().get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:24 | require ... )().get | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | exceptional return of require ... );\\n}) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | exceptional return of require ... );\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | exceptional return of require ... );\\n}) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | require ... );\\n}) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | require ... );\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | require ... );\\n}) | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | contextFunctionInterfaces | cnd(t) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:22:3:24 | get | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:22:3:24 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:22:3:24 | get | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | CalleeFlexibleAccessPath | import(!)().get | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | calleeImports | express | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | contextFunctionInterfaces | cnd(t) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n );\\n} | CalleeFlexibleAccessPath | import(!)().get | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n );\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n );\\n} | calleeImports | express | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n );\\n} | contextFunctionInterfaces | cnd(t) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n );\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n );\\n} | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | CalleeFlexibleAccessPath | pgp | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | calleeImports | pg-promise | @@ -3491,6 +17374,40 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ... PRICE" | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ... PRICE" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ... PRICE" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ... PRICE" | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ... PRICE" | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | stringConcatenatedWith | -endpoint- req.params.category + '' ORDER BY PRICE' | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | contextFunctionInterfaces | cnd(t) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | @@ -3501,6 +17418,63 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ... PRICE" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ... PRICE" | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ... PRICE" | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' -endpoint- '' ORDER BY PRICE' | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' + req.params.category -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | CalleeFlexibleAccessPath | db.any | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | calleeImports | pg-promise | @@ -3510,6 +17484,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | CalleeFlexibleAccessPath | db.many | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | calleeImports | pg-promise | @@ -3519,6 +17518,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | CalleeFlexibleAccessPath | db.manyOrNone | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | calleeImports | pg-promise | @@ -3528,6 +17552,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | CalleeFlexibleAccessPath | db.map | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | calleeImports | pg-promise | @@ -3537,6 +17586,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | CalleeFlexibleAccessPath | db.multi | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | calleeImports | pg-promise | @@ -3546,6 +17620,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | CalleeFlexibleAccessPath | db.multiResult | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | calleeImports | pg-promise | @@ -3555,6 +17654,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | CalleeFlexibleAccessPath | db.none | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | calleeImports | pg-promise | @@ -3564,6 +17688,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | calleeImports | pg-promise | @@ -3573,6 +17722,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | CalleeFlexibleAccessPath | db.oneOrNone | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | calleeImports | pg-promise | @@ -3582,6 +17756,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | CalleeFlexibleAccessPath | db.query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | calleeImports | pg-promise | @@ -3591,6 +17790,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | CalleeFlexibleAccessPath | db.result | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | calleeImports | pg-promise | @@ -3600,6 +17824,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n t ... OK\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n t ... OK\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n t ... OK\\n } | calleeImports | pg-promise | @@ -3609,6 +17858,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n t ... OK\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n t ... OK\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n t ... OK\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | InputAccessPathFromCallee | 0.text | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | InputArgumentIndex | 0 | @@ -3619,6 +17883,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n t ... OK\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n t ... OK\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n t ... OK\\n } | calleeImports | pg-promise | @@ -3628,6 +17917,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n t ... OK\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n t ... OK\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n t ... OK\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | InputAccessPathFromCallee | 0.text | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | InputArgumentIndex | 0 | @@ -3638,6 +17942,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | InputAccessPathFromCallee | 0.values | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | InputArgumentIndex | 0 | @@ -3648,6 +17977,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n t ... ter\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n t ... ter\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n t ... ter\\n } | calleeImports | pg-promise | @@ -3657,6 +18021,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n t ... ter\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n t ... ter\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n t ... ter\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | InputAccessPathFromCallee | 0.text | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | InputArgumentIndex | 0 | @@ -3667,6 +18046,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | InputAccessPathFromCallee | 0.values | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | InputArgumentIndex | 0 | @@ -3677,6 +18081,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n t ... OK\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n t ... OK\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n t ... OK\\n } | calleeImports | pg-promise | @@ -3686,6 +18125,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n t ... OK\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n t ... OK\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n t ... OK\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ... = $1^' | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ... = $1^' | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ... = $1^' | InputAccessPathFromCallee | 0.text | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ... = $1^' | InputArgumentIndex | 0 | @@ -3696,6 +18150,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ... = $1^' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ... = $1^' | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ... = $1^' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | InputAccessPathFromCallee | 0.values | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | InputArgumentIndex | 0 | @@ -3706,6 +18185,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ... ]\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ... ]\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ... ]\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ... ]\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ... ]\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ... ]\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ... ]\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ... ]\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ... ]\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ... ]\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n t ... ]\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n t ... ]\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n t ... ]\\n } | calleeImports | pg-promise | @@ -3715,6 +18229,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n t ... ]\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n t ... ]\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n t ... ]\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | InputAccessPathFromCallee | 0.text | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | InputArgumentIndex | 0 | @@ -3725,6 +18254,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n ] | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n ... n\\n ] | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n ... n\\n ] | InputAccessPathFromCallee | 0.values | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n ... n\\n ] | InputArgumentIndex | 0 | @@ -3735,21 +18279,121 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n ... n\\n ] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n ... n\\n ] | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n ... n\\n ] | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ... }\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ... }\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ... }\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ... }\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ... }\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ... }\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ... }\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ... }\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ... }\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ... }\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n t ... }\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n t ... }\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n t ... }\\n } | calleeImports | pg-promise | @@ -3759,6 +18403,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n t ... }\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n t ... }\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n t ... }\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | InputAccessPathFromCallee | 0.text | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | InputArgumentIndex | 0 | @@ -3769,6 +18428,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n ... n\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n ... n\\n } | InputAccessPathFromCallee | 0.values | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n ... n\\n } | InputArgumentIndex | 0 | @@ -3779,6 +18453,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n ... n\\n } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n ... n\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n ... n\\n } | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | InputAccessPathFromCallee | 0.values.id | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | InputArgumentIndex | 0 | @@ -3789,6 +18488,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | InputAccessPathFromCallee | 0.values.name | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | InputArgumentIndex | 0 | @@ -3799,6 +18533,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ... }\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ... }\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ... }\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ... }\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ... }\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ... }\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ... }\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ... }\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ... }\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ... }\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n t ... }\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n t ... }\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n t ... }\\n } | calleeImports | pg-promise | @@ -3808,6 +18577,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n t ... }\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n t ... }\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n t ... }\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | InputAccessPathFromCallee | 0.text | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | InputArgumentIndex | 0 | @@ -3818,6 +18602,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n ... e\\n } | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n ... e\\n } | InputAccessPathFromCallee | 0.values | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n ... e\\n } | InputArgumentIndex | 0 | @@ -3828,6 +18627,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n ... e\\n } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n ... e\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n ... e\\n } | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | InputAccessPathFromCallee | 0.values.id | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | InputArgumentIndex | 0 | @@ -3838,6 +18662,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | InputAccessPathFromCallee | 0.values.name | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | InputArgumentIndex | 0 | @@ -3848,6 +18707,41 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title: ... s.title | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | CalleeFlexibleAccessPath | db.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | InputAccessPathFromCallee | 0.values.title | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | InputArgumentIndex | 0 | @@ -3858,6 +18752,71 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n }) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n }) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n }) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ... OK\\n } | CalleeFlexibleAccessPath | db.task | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ... OK\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ... OK\\n } | calleeImports | pg-promise | @@ -3867,6 +18826,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ... OK\\n } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ... OK\\n } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ... OK\\n } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | CalleeFlexibleAccessPath | t.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | contextFunctionInterfaces | cnd(t) | @@ -3875,6 +18859,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | receiverName | t | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ... OK\\n ) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ... OK\\n ) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ... OK\\n ) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ... OK\\n ) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ... OK\\n ) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ... OK\\n ) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ... OK\\n ) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ... OK\\n ) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ... OK\\n ) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ... OK\\n ) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd: ... uery) } | CalleeFlexibleAccessPath | db.taskIf | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd: ... uery) } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd: ... uery) } | calleeImports | pg-promise | @@ -3884,6 +18893,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd: ... uery) } | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd: ... uery) } | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd: ... uery) } | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t ... (query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | CalleeFlexibleAccessPath | db.taskIf | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | InputAccessPathFromCallee | 0.cnd | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | InputArgumentIndex | 0 | @@ -3894,6 +18948,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | CalleeFlexibleAccessPath | t.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | contextFunctionInterfaces | cnd(t) | @@ -3902,6 +18981,36 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | receiverName | t | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | CalleeFlexibleAccessPath | db.taskIf | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | calleeImports | pg-promise | @@ -3911,6 +19020,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | fileImports | express pg-promise | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | contextFunctionInterfaces | cnd(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | contextSurroundingFunctionParameters | (req, res)\n(t) | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | enclosingFunctionName | get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | CalleeFlexibleAccessPath | t.one | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | contextFunctionInterfaces | cnd(t) | @@ -3919,18 +19053,139 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | enclosingFunctionName | get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | fileImports | express pg-promise | | autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | receiverName | t | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:0 | this | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | require | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:11 | redis | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:11 | redis | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:11 | redis | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis = ... redis") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis = ... redis") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis = ... redis") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:21 | require | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | exceptional return of require("redis") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | exceptional return of require("redis") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | exceptional return of require("redis") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | require("redis") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | require("redis") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | require("redis") | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client ... lient() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client ... lient() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client ... lient() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:20 | redis | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:20 | redis | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:20 | redis | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:33 | redis.createClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:33 | redis.createClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:33 | redis.createClient | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | exceptional return of redis.createClient() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | exceptional return of redis.createClient() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | exceptional return of redis.createClient() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | redis.createClient() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | redis.createClient() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | redis.createClient() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:22:3:33 | createClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:22:3:33 | createClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:22:3:33 | createClient | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:13 | Express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:13 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:13 | Express | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express ... press') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express ... press') | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:23 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:23 | require | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | exceptional return of require('express') | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | require('express') | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:9 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:9 | app | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app = Express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app = Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app = Express() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:19 | Express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:19 | Express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:19 | Express | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | Express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | Express() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | exceptional return of Express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | exceptional return of Express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | exceptional return of Express() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:3 | app | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:7 | app.use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:7 | app.use | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | app.use ... json()) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | app.use ... json()) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | exceptional return of app.use ... json()) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | exceptional return of app.use ... json()) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:5:7:7 | use | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:5:7:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:5:7:7 | use | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:15 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:15 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:15 | require | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | exceptional return of require ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | exceptional return of require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | exceptional return of require ... arser') | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | require ... arser') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | require ... arser') | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:35 | require ... ').json | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:35 | require ... ').json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:35 | require ... ').json | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | exceptional return of require ... .json() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | exceptional return of require ... .json() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | exceptional return of require ... .json() | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | CalleeFlexibleAccessPath | app.use | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | calleeImports | express | @@ -3944,6 +19199,24 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:32:7:35 | json | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:32:7:35 | json | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:32:7:35 | json | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:3 | app | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:8 | app.post | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | app.pos ... T OK\\n}) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:5:9:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:5:9:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:5:9:8 | post | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | calleeImports | express | @@ -3951,6 +19224,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -3958,6 +19246,66 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | CalleeFlexibleAccessPath | client.set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | calleeImports | redis | @@ -3967,6 +19315,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | CalleeFlexibleAccessPath | client.set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | calleeImports | redis | @@ -3976,6 +19334,104 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof ... string" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof ... string" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof ... string" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof ... string" | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof ... string" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | CalleeFlexibleAccessPath | client.set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | calleeImports | redis | @@ -3994,6 +19450,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | CalleeFlexibleAccessPath | client.set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | calleeImports | redis | @@ -4004,15 +19485,55 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | receiverName | client | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | CalleeFlexibleAccessPath | client.set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | calleeImports | redis | @@ -4031,6 +19552,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | CalleeFlexibleAccessPath | client.hmset | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | calleeImports | redis | @@ -4076,6 +19622,96 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ... .multi | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ... .multi | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ... .multi | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ... .multi | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ... .multi | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ... .set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ... .set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ... .set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ... .set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ... .set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ... .set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ... .set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ... .set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ... .set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ... .set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ... .get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ... .get | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ... .get | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ... .get | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ... .get | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ... .exec | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ... .exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ... .exec | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ... .exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ... .exec | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | CalleeFlexibleAccessPath | client.multi().set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | calleeImports | redis | @@ -4092,6 +19728,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | CalleeFlexibleAccessPath | client.multi().set().set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | calleeImports | redis | @@ -4108,6 +19749,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | CalleeFlexibleAccessPath | client.multi().set().set().get | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | calleeImports | redis | @@ -4116,6 +19762,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | CalleeFlexibleAccessPath | client.multi().set().set().get().exec | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | calleeImports | redis | @@ -4124,6 +19790,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, replies) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | contextSurroundingFunctionParameters | (req, res)\n(err, replies) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n }) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n }) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n } | CalleeFlexibleAccessPath | client.duplicate | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n } | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n } | calleeImports | redis | @@ -4133,6 +19849,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n } | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n } | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n } | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | CalleeFlexibleAccessPath | newClient.set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | contextFunctionInterfaces | | @@ -4149,6 +19915,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | receiverName | newClient | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | CalleeFlexibleAccessPath | client.duplicate().set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | calleeImports | redis | @@ -4165,6 +19976,40 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:1:36:33 | import ... 'util'; | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:1:36:33 | import ... 'util'; | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:1:36:33 | import ... 'util'; | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:27:36:32 | 'util' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:27:36:32 | 'util' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:27:36:32 | 'util' | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:3 | app | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:8 | app.post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:8 | app.post | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | app.pos ... / OK\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | app.pos ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | app.pos ... / OK\\n}) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | exceptional return of app.pos ... / OK\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | exceptional return of app.pos ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | exceptional return of app.pos ... / OK\\n}) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:5:37:8 | post | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:5:37:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:5:37:8 | post | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | calleeImports | express | @@ -4172,6 +20017,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.post | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -4179,6 +20039,96 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | CalleeFlexibleAccessPath | client.set | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | calleeImports | redis | @@ -4197,6 +20147,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | CalleeFlexibleAccessPath | promisify | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | calleeImports | util | @@ -4205,6 +20205,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | CalleeFlexibleAccessPath | promisify().bind | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | calleeImports | util | @@ -4213,6 +20223,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 = ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 = ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 = ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 = ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 = ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | CalleeFlexibleAccessPath | setAsync | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | calleeImports | util | @@ -4229,6 +20264,47 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | assignedToPropName | setAsync | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | CalleeFlexibleAccessPath | promisify | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | calleeImports | util | @@ -4237,6 +20313,46 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 = ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 = ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 = ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 = ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 = ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | CalleeFlexibleAccessPath | client.setAsync | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | calleeImports | redis | @@ -4255,6 +20371,47 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ... => {}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ... => {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ... => {}) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ... => {}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ... => {}) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | assignedToPropName | unrelated | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | CalleeFlexibleAccessPath | promisify | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | calleeImports | util | @@ -4263,6 +20420,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 = ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 = ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 = ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 = ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 = ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | CalleeFlexibleAccessPath | client.unrelated | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | calleeImports | redis | @@ -4281,6 +20483,56 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | receiverName | client | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | CalleeFlexibleAccessPath | promisify | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | calleeImports | util | @@ -4289,6 +20541,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | CalleeFlexibleAccessPath | promisify().bind | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | calleeImports | util | @@ -4297,6 +20559,31 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 = ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 = ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 = ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 = ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 = ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | enclosingFunctionName | app.post#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | fileImports | body-parser express redis util | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | CalleeFlexibleAccessPath | unrelated | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | calleeImports | util | @@ -4313,24 +20600,148 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | enclosingFunctionName | app.post#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | fileImports | body-parser express redis util | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:0 | this | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | db | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | require | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:11 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:11 | express | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:32 | express ... press') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:32 | express ... press') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:21 | require | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | exceptional return of require('express') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | require('express') | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:11 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:11 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:11 | sqlite3 | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 ... rbose() | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:21 | require | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | exceptional return of require('sqlite3') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | exceptional return of require('sqlite3') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | exceptional return of require('sqlite3') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | require('sqlite3') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | require('sqlite3') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | require('sqlite3') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:40 | require ... verbose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:40 | require ... verbose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:40 | require ... verbose | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | exceptional return of require ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | exceptional return of require ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | exceptional return of require ... rbose() | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | require ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | require ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | require ... rbose() | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:34:5:40 | verbose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:34:5:40 | verbose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:34:5:40 | verbose | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db = ne ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db = ne ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db = ne ... mory:') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | exceptional return of new sql ... mory:') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | new sql ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | new sql ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | new sql ... mory:') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:20 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:20 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:20 | sqlite3 | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:29 | sqlite3.Database | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:29 | sqlite3.Database | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:29 | sqlite3.Database | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:22:6:29 | Database | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:22:6:29 | Database | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:22:6:29 | Database | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | CalleeFlexibleAccessPath | sqlite3.Database | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | calleeImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:6 | io | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:6 | io | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:6 | io | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io = re ... .io')() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io = re ... .io')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io = re ... .io')() | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:16 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:16 | require | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | exceptional return of require('socket.io') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | exceptional return of require('socket.io') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | exceptional return of require('socket.io') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | require('socket.io') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | require('socket.io') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | require('socket.io') | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | exceptional return of require ... .io')() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | exceptional return of require ... .io')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | exceptional return of require ... .io')() | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | require ... .io')() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | require ... .io')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | require ... .io')() | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:2 | io | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:2 | io | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:2 | io | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:5 | io.on | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:5 | io.on | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:5 | io.on | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | exceptional return of io.on(' ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | exceptional return of io.on(' ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | exceptional return of io.on(' ... });\\n}) | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | io.on(' ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | io.on(' ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | io.on(' ... });\\n}) | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:4:9:5 | on | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:4:9:5 | on | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:4:9:5 | on | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | CalleeFlexibleAccessPath | io.on | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | calleeImports | socket.io | @@ -4338,6 +20749,11 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | receiverName | io | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ... });\\n} | CalleeFlexibleAccessPath | io.on | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ... });\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ... });\\n} | calleeImports | socket.io | @@ -4345,6 +20761,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ... });\\n} | contextSurroundingFunctionParameters | (socket) | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ... });\\n} | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ... });\\n} | receiverName | io | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextSurroundingFunctionParameters | (socket) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | contextSurroundingFunctionParameters | (socket) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | contextSurroundingFunctionParameters | (socket) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n }) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n }) | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n }) | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n }) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n }) | contextSurroundingFunctionParameters | (socket) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n }) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n }) | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n }) | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | contextSurroundingFunctionParameters | (socket) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | CalleeFlexibleAccessPath | socket.on | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | contextFunctionInterfaces | | @@ -4353,6 +20814,16 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | enclosingFunctionName | io.on#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | receiverName | socket | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n } | CalleeFlexibleAccessPath | socket.on | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n } | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n } | contextFunctionInterfaces | | @@ -4361,6 +20832,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n } | enclosingFunctionName | io.on#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n } | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n } | receiverName | socket | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextSurroundingFunctionParameters | (socket)\n(handle) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | contextSurroundingFunctionParameters | (socket)\n(handle) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | contextSurroundingFunctionParameters | (socket)\n(handle) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | contextSurroundingFunctionParameters | (socket)\n(handle) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | contextSurroundingFunctionParameters | (socket)\n(handle) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | CalleeFlexibleAccessPath | db.run | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | calleeImports | sqlite3 | @@ -4370,12 +20886,67 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | enclosingFunctionName | io.on#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | fileImports | express socket.io sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT ... VALUES | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT ... VALUES | contextSurroundingFunctionParameters | (socket)\n(handle) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT ... VALUES | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT ... VALUES | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT ... VALUES | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT ... VALUES | stringConcatenatedWith | -endpoint- handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | contextSurroundingFunctionParameters | (socket)\n(handle) | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES handle | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | enclosingFunctionName | io.on#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | fileImports | express socket.io sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | stringConcatenatedWith | 'INSERT INTO users(name) VALUES ' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:0 | this | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | require | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | sql | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | sql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | sql | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:11 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:11 | express | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express ... press') | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:21 | require | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | exceptional return of require('express') | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | require('express') | fileImports | express mssql | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql = r ... mssql') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql = r ... mssql') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql = r ... mssql') | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:19 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:19 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:19 | require | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | exceptional return of require('mssql') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | exceptional return of require('mssql') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | exceptional return of require('mssql') | fileImports | express mssql | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | require('mssql') | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | require('mssql') | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | require('mssql') | fileImports | express mssql | @@ -4385,6 +20956,39 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:7 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:7 | app | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app = express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app = express() | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:17 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:17 | express | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | exceptional return of express() | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | express() | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:3 | app | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:7 | app.get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:7 | app.get | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | app.get ... '");\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | app.get ... '");\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | app.get ... '");\\n}) | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | exceptional return of app.get ... '");\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | exceptional return of app.get ... '");\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | exceptional return of app.get ... '");\\n}) | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:5:5:7 | get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:5:5:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:5:5:7 | get | fileImports | express mssql | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | calleeImports | express | @@ -4392,6 +20996,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | fileImports | express mssql | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | fileImports | express mssql | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | calleeImports | express | @@ -4399,6 +21018,142 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | fileImports | express mssql | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select ... e id = | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select ... e id = | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select ... e id = | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select ... e id = | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select ... e id = | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ... + "'") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ... + "'") | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ... + "'") | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ... + "'") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ... + "'") | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ... + "'") | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ... + "'") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ... + "'") | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ... + "'") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ... + "'") | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | stringConcatenatedWith | -endpoint- req.params.id + ''' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | fileImports | express mssql | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | CalleeFlexibleAccessPath | sql.Request().query | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | calleeImports | mssql | @@ -4407,12 +21162,172 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | stringConcatenatedWith | 'select * from mytable where id = '' -endpoint- ''' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | enclosingFunctionBody | req res sql query select * from mytable where id = req params id sql Request query select * from mytable where id = ' req params id ' | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | fileImports | express mssql | +| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | stringConcatenatedWith | 'select * from mytable where id = '' + req.params.id -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:0 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:0 | this | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | require | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | require | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:8 | pg | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:8 | pg | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:8 | pg | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg = require('pg') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg = require('pg') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg = require('pg') | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:18 | require | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:18 | require | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | exceptional return of require('pg') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | exceptional return of require('pg') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | exceptional return of require('pg') | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | require('pg') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | require('pg') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | require('pg') | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | contextFunctionInterfaces | handler(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool = ... config) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool = ... config) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool = ... config) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | exceptional return of new pg.Pool(config) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | exceptional return of new pg.Pool(config) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | exceptional return of new pg.Pool(config) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | new pg.Pool(config) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | new pg.Pool(config) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | new pg.Pool(config) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:19 | pg | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:19 | pg | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:19 | pg | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:24 | pg.Pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:24 | pg.Pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:24 | pg.Pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:21:4:24 | Pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:21:4:24 | Pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:21:4:24 | Pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | CalleeFlexibleAccessPath | pg.Pool | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | calleeImports | pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | functio ... });\\n} | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | functio ... });\\n} | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | functio ... });\\n} | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 ... PRICE" | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 ... PRICE" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 ... PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 ... PRICE" | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 ... PRICE" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | stringConcatenatedWith | -endpoint- req.params.category + '' ORDER BY PRICE' | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | contextFunctionInterfaces | handler(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | @@ -4423,6 +21338,63 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ... PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ... PRICE" | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ... PRICE" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' -endpoint- '' ORDER BY PRICE' | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' + req.params.category -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n }) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n }) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | CalleeFlexibleAccessPath | pool.query | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | calleeImports | pg | @@ -4441,6 +21413,21 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | receiverName | pool | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n } | CalleeFlexibleAccessPath | pool.query | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n } | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n } | calleeImports | pg | @@ -4450,11 +21437,78 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n } | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n } | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n } | receiverName | pool | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | contextSurroundingFunctionParameters | (req, res)\n(err, results) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | contextSurroundingFunctionParameters | (req, res)\n(err, results) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 ... PRICE" | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 ... PRICE" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 ... PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 ... PRICE" | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 ... PRICE" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | stringConcatenatedWith | -endpoint- ' ORDER BY PRICE' | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ... PRICE" | contextFunctionInterfaces | handler(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ... PRICE" | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ... PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ... PRICE" | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ... PRICE" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1' -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n }) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n }) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n }) | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n }) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | CalleeFlexibleAccessPath | pool.query | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | calleeImports | pg | @@ -4473,11 +21527,51 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | receiverName | pool | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n } | CalleeFlexibleAccessPath | pool.query | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n } | InputArgumentIndex | 2 | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n } | calleeImports | pg | @@ -4487,12 +21581,54 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n } | enclosingFunctionName | handler | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n } | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n } | receiverName | pool | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | contextSurroundingFunctionParameters | (req, res)\n(err, results) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | contextSurroundingFunctionParameters | (req, res)\n(err, results) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1 ORDER BY PRICE pool query query2 req params category err results | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | enclosingFunctionName | handler | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:7 | require | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:7 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:7 | require | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | exceptional return of require('express') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | exceptional return of require('express') | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | require('express') | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | require('express') | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | exceptional return of require('express')() | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | exceptional return of require('express')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | exceptional return of require('express')() | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | require('express')() | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | require('express')() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | require('express')() | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:24 | require ... )().get | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:24 | require ... )().get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:24 | require ... )().get | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | exceptional return of require ... andler) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | exceptional return of require ... andler) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | exceptional return of require ... andler) | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | require ... andler) | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | require ... andler) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | require ... andler) | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | contextFunctionInterfaces | handler(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:22:21:24 | get | contextFunctionInterfaces | handler(req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:22:21:24 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:22:21:24 | get | fileImports | express pg | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | CalleeFlexibleAccessPath | import(!)().get | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | calleeImports | express | @@ -4505,12 +21641,106 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | contextFunctionInterfaces | handler(req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | fileImports | express pg | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:0 | this | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | db | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | require | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:11 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:11 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:11 | sqlite3 | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 ... rbose() | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:21 | require | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | exceptional return of require('sqlite3') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | exceptional return of require('sqlite3') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | exceptional return of require('sqlite3') | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | require('sqlite3') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | require('sqlite3') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | require('sqlite3') | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:40 | require ... verbose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:40 | require ... verbose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:40 | require ... verbose | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | exceptional return of require ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | exceptional return of require ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | exceptional return of require ... rbose() | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | require ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | require ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | require ... rbose() | fileImports | sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:34:3:40 | verbose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:34:3:40 | verbose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:34:3:40 | verbose | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db = ne ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db = ne ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db = ne ... mory:') | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | exceptional return of new sql ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | exceptional return of new sql ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | exceptional return of new sql ... mory:') | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | new sql ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | new sql ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | new sql ... mory:') | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:20 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:20 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:20 | sqlite3 | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:29 | sqlite3.Database | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:29 | sqlite3.Database | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:29 | sqlite3.Database | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:22:4:29 | Database | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:22:4:29 | Database | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:22:4:29 | Database | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | CalleeFlexibleAccessPath | sqlite3.Database | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | calleeImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:7 | angular | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:7 | angular | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:7 | angular | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:14 | angular.module | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:14 | angular.module | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:14 | angular.module | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | angular ... oute']) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | angular ... oute']) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | angular ... oute']) | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | exceptional return of angular ... oute']) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | exceptional return of angular ... oute']) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | exceptional return of angular ... oute']) | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:7:11 | angular ... troller | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:7:11 | angular ... troller | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:7:11 | angular ... troller | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | angular ... "');\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | angular ... "');\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | angular ... "');\\n}) | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | exceptional return of angular ... "');\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | exceptional return of angular ... "');\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | exceptional return of angular ... "');\\n}) | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:9:6:14 | module | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:9:6:14 | module | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:9:6:14 | module | fileImports | sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | CalleeFlexibleAccessPath | angular.module | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | contextFunctionInterfaces | | @@ -4524,18 +21754,90 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | fileImports | sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | receiverName | angular | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:2:7:11 | controller | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:2:7:11 | controller | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:2:7:11 | controller | fileImports | sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | CalleeFlexibleAccessPath | angular.module().controller | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | fileImports | sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | CalleeFlexibleAccessPath | angular.module().controller | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | contextSurroundingFunctionParameters | ($routeParams) | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ... + '"') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ... + '"') | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ... + '"') | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ... + '"') | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ... + '"') | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ... + '"') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ... + '"') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ... + '"') | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ... + '"') | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ... + '"') | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | stringConcatenatedWith | -endpoint- $routeParams.id + '"' | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | contextSurroundingFunctionParameters | ($routeParams) | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | @@ -4550,18 +21852,161 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | enclosingFunctionName | controller#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | fileImports | sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' -endpoint- '"' | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | contextSurroundingFunctionParameters | ($routeParams) | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | enclosingFunctionName | controller#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | fileImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' + $routeParams.id -endpoint- | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:0 | this | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | db | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | require | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:11 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:11 | express | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express ... press') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express ... press') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:21 | require | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | exceptional return of require('express') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | require('express') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | require('express') | fileImports | express sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:11 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:11 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:11 | sqlite3 | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 ... rbose() | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:21 | require | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:21 | require | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | exceptional return of require('sqlite3') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | exceptional return of require('sqlite3') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | exceptional return of require('sqlite3') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | require('sqlite3') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | require('sqlite3') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | require('sqlite3') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:40 | require ... verbose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:40 | require ... verbose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:40 | require ... verbose | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | exceptional return of require ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | exceptional return of require ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | exceptional return of require ... rbose() | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | require ... rbose() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | require ... rbose() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | require ... rbose() | fileImports | express sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | CalleeFlexibleAccessPath | require | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | calleeImports | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:34:5:40 | verbose | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:34:5:40 | verbose | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:34:5:40 | verbose | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db = ne ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db = ne ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db = ne ... mory:') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | exceptional return of new sql ... mory:') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | new sql ... mory:') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | new sql ... mory:') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | new sql ... mory:') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:20 | sqlite3 | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:20 | sqlite3 | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:20 | sqlite3 | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:29 | sqlite3.Database | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:29 | sqlite3.Database | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:29 | sqlite3.Database | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:22:6:29 | Database | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:22:6:29 | Database | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:22:6:29 | Database | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | CalleeFlexibleAccessPath | sqlite3.Database | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | InputArgumentIndex | 0 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | calleeImports | sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:7 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:7 | app | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app = express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app = express() | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:17 | express | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:17 | express | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | exceptional return of express() | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | express() | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | express() | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:3 | app | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:3 | app | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:7 | app.get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:7 | app.get | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | app.get ... "');\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | app.get ... "');\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | app.get ... "');\\n}) | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | exceptional return of app.get ... "');\\n}) | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | exceptional return of app.get ... "');\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | exceptional return of app.get ... "');\\n}) | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:5:9:7 | get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:5:9:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:5:9:7 | get | fileImports | express sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | InputArgumentIndex | 0 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | calleeImports | express | @@ -4569,6 +22014,26 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | contextSurroundingFunctionParameters | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | fileImports | express sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | fileImports | express sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | InputArgumentIndex | 1 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | calleeImports | express | @@ -4576,6 +22041,57 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | fileImports | express sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | receiverName | app | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ... + '"') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ... + '"') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ... + '"') | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ... + '"') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ... + '"') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ... + '"') | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ... + '"') | contextSurroundingFunctionParameters | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ... + '"') | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ... + '"') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ... + '"') | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | stringConcatenatedWith | -endpoint- req.params.id + '"' | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | contextFunctionInterfaces | | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | contextSurroundingFunctionParameters | (req, res) | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | @@ -4590,12 +22106,35779 @@ tokenFeatures | autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | enclosingFunctionName | app.get#functionalargument | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | fileImports | express sqlite3 | | autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | receiverName | db | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' -endpoint- '"' | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | contextFunctionInterfaces | | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | fileImports | express sqlite3 | +| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' + req.params.id -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | run | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:16 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:16 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | require ... ocess") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:8 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:8 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http = ... 'http') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:18 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:18 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | exceptional return of require('http') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | require('http') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | require('http') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url = require('url') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:17 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:17 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | exceptional return of require('url') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | require('url') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | require('url') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:5:10 | server | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:5:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:5:10 | server | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:64:2 | server ... Y] \\n\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:64:2 | server ... Y] \\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:64:2 | server ... Y] \\n\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:17 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:17 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:30 | http.createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:30 | http.createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | exceptional return of http.cr ... Y] \\n\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | exceptional return of http.cr ... Y] \\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | exceptional return of http.cr ... Y] \\n\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | http.cr ... Y] \\n\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | http.cr ... Y] \\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | http.cr ... Y] \\n\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:19:5:30 | createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:19:5:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:19:5:30 | createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | CalleeFlexibleAccessPath | http.createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | receiverName | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | CalleeFlexibleAccessPath | cp.spawnSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | CalleeFlexibleAccessPath | cp.fork | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | CalleeFlexibleAccessPath | cp.spawnSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | CalleeFlexibleAccessPath | cp.fork | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ... "bar") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ... "bar") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ... "bar") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ... "bar") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ... "bar") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ... "bar") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ... "bar") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ... "bar") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ... "bar") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ... "bar") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | stringConcatenatedWith | -endpoint- cmd + 'bar' | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | stringConcatenatedWith | 'foo' -endpoint- 'bar' | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | stringConcatenatedWith | 'foo' + cmd -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | InputAccessPathFromCallee | 1.shell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | assignedToPropName | shell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ... cmd}}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ... cmd}}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ... cmd}}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ... cmd}}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ... cmd}}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ... cmd}}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ... cmd}}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ... cmd}}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ... cmd}}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ... cmd}}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | InputAccessPathFromCallee | 1.env | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | assignedToPropName | env | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | InputAccessPathFromCallee | 1.env.PATH | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | assignedToPropName | PATH | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | InputAccessPathFromCallee | 1.cwd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | assignedToPropName | cwd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | InputAccessPathFromCallee | 1.uid | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | assignedToPropName | uid | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | InputAccessPathFromCallee | 1.gid | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | assignedToPropName | gid | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ... = '/c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ... = '/c' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ... = '/c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ... = '/c' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ... = '/c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ... = '-c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ... = '-c' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ... = '-c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ... = '-c' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ... = '-c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ... cmd ]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ... cmd ]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ... cmd ]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ... cmd ]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ... cmd ]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ... cmd ]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ... cmd ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ... cmd ]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ... cmd ]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ... cmd ]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | assignedToPropName | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | assignedToPropName | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | assignedToPropName | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | assignedToPropName | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | CalleeFlexibleAccessPath | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | CalleeFlexibleAccessPath | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | assignedToPropName | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | stringConcatenatedWith | -endpoint- 'c' | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | stringConcatenatedWith | '-' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | assignedToPropName | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | stringConcatenatedWith | -endpoint- '/bash' | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | stringConcatenatedWith | '/bin' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ... cmd])) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ... cmd])) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ... cmd])) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ... cmd])) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ... cmd])) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ... cmd])) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ... cmd])) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ... cmd])) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ... cmd])) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ... cmd])) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C', ... , cmd]) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C', ... , cmd]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C', ... , cmd]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C', ... , cmd]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C', ... , cmd]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C', ... , cmd]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | CalleeFlexibleAccessPath | ?.concat | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C', ... at(cmd) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C', ... at(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C', ... at(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C', ... at(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C', ... at(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C', ... at(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | CalleeFlexibleAccessPath | ?.concat | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ... + "c") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ... + "c") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ... + "c") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ... + "c") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ... + "c") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ... + "c") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ... + "c") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ... + "c") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ... + "c") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ... + "c") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | CalleeFlexibleAccessPath | myArgs.push | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | receiverName | myArgs | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | stringConcatenatedWith | -endpoint- 'c' | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | stringConcatenatedWith | '-' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | CalleeFlexibleAccessPath | myArgs.push | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | receiverName | myArgs | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | stringConcatenatedWith | -endpoint- '/bash' | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | stringConcatenatedWith | '/bin' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | functio ... uild.\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | functio ... uild.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | functio ... uild.\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | enclosingFunctionBody | cmd args cp spawn cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | enclosingFunctionName | run | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util = ... "util") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util = ... "util") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util = ... "util") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:18 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:18 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | exceptional return of require("util") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | exceptional return of require("util") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | exceptional return of require("util") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | require("util") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | require("util") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | require("util") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:4 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:4 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:17 | http.createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:17 | http.createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | http.cr ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:6:72:17 | createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:6:72:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:6:72:17 | createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | CalleeFlexibleAccessPath | util.promisify | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | CalleeFlexibleAccessPath | util.promisify() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:22 | webpackDevServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:22 | webpackDevServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:22 | webpackDevServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpack ... erver') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpack ... erver') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpack ... erver') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpackDevServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpackDevServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpackDevServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:32 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:32 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:32 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | exceptional return of require ... erver') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | exceptional return of require ... erver') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | exceptional return of require ... erver') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | require ... erver') | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | require ... erver') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | require ... erver') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | exceptional return of new web ... }\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | exceptional return of new web ... }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | exceptional return of new web ... }\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | new web ... }\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | new web ... }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | new web ... }\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:5:80:20 | webpackDevServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:5:80:20 | webpackDevServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:5:80:20 | webpackDevServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | CalleeFlexibleAccessPath | webpackDevServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | calleeImports | webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n b ... }\\n} | CalleeFlexibleAccessPath | webpackDevServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n b ... }\\n} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n b ... }\\n} | calleeImports | webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n b ... }\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n b ... }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n b ... }\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:81:10 | before | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:81:10 | before | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:81:10 | before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n } | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n } | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | webpackDevServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | InputAccessPathFromCallee | ?.before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | assignedToPropName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | calleeImports | webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | contextSurroundingFunctionParameters | (app) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextSurroundingFunctionParameters | (app) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | contextSurroundingFunctionParameters | (app) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | contextSurroundingFunctionParameters | (app) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ... }) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ... }) | contextSurroundingFunctionParameters | (app) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ... }) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ... }) | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ... }) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ... }) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ... }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ... }) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ... }) | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ... }) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | contextSurroundingFunctionParameters | (app) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | CalleeFlexibleAccessPath | app.use | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ... } | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | CalleeFlexibleAccessPath | import(!).foo | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | calleeImports | my-sub-lib | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | enclosingFunctionName | before | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:1:90:32 | import ... outer"; | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:1:90:32 | import ... outer"; | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:1:90:32 | import ... outer"; | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:20:90:31 | "koa-router" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:20:90:31 | "koa-router" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:20:90:31 | "koa-router" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:12 | router | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:12 | router | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:12 | router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router ... outer() | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router ... outer() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router ... outer() | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | exceptional return of new Router() | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | exceptional return of new Router() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | exceptional return of new Router() | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | new Router() | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | new Router() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | new Router() | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:20:91:25 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:20:91:25 | Router | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:20:91:25 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:6 | router | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:6 | router | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:6 | router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:10 | router.get | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:10 | router.get | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:10 | router.get | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | exceptional return of router. ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | exceptional return of router. ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | exceptional return of router. ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | router. ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | router. ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | router. ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:8:93:10 | get | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:8:93:10 | get | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:8:93:10 | get | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | CalleeFlexibleAccessPath | router.get | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | calleeImports | koa-router | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | receiverName | router | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | CalleeFlexibleAccessPath | router.get | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | calleeImports | koa-router | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | receiverName | router | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | stringConcatenatedWith | -endpoint- ctx.params.host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | stringConcatenatedWith | 'ping ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | contextFunctionInterfaces | before(app)\nrun(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | contextSurroundingFunctionParameters | (ctx) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | enclosingFunctionBody | ctx cp exec ping ctx params host | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | enclosingFunctionName | router.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp = re ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp = re ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp = re ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:18 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | exceptional return of require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | exceptional return of require ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | require ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:8 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:8 | http | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http = ... 'http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:18 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | exceptional return of require('http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | require('http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url = require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:17 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:17 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | exceptional return of require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | enclosingFunctionBody | sh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | enclosingFunctionBody | sh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | enclosingFunctionBody | sh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | functio ... "sh";\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | functio ... "sh";\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | functio ... "sh";\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | enclosingFunctionBody | sh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | enclosingFunctionBody | sh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | functio ... / BAD\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | functio ... / BAD\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | functio ... / BAD\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | enclosingFunctionBody | command options cp spawn getShell -c command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:4 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:4 | http | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:17 | http.createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:17 | http.createServer | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | exceptional return of http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | exceptional return of http.cr ... md);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | exceptional return of http.cr ... md);\\n}) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | http.cr ... md);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | http.cr ... md);\\n}) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:6:13:17 | createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:6:13:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:6:13:17 | createServer | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | CalleeFlexibleAccessPath | http.createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | receiverName | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | CalleeFlexibleAccessPath | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp = re ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp = re ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp = re ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:18 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | exceptional return of require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | exceptional return of require ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | require ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:8 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:8 | http | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http = ... 'http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:18 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | exceptional return of require('http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | require('http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url = require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:17 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:17 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | exceptional return of require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | functio ... }\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | functio ... }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | functio ... }\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd: ... '/C' } | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd: ... '/C' } | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd: ... '/C' } | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd: ... '/C' } | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd: ... '/C' } | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | assignedToPropName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | assignedToPropName | arg | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd: ... '-c' } | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd: ... '-c' } | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd: ... '-c' } | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd: ... '-c' } | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd: ... '-c' } | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | assignedToPropName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | assignedToPropName | arg | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | enclosingFunctionName | getShell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | functio ... / BAD\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | functio ... / BAD\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | functio ... / BAD\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | contextSurroundingFunctionParameters | (command, options) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | enclosingFunctionName | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:4 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:4 | http | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:17 | http.createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:17 | http.createServer | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | exceptional return of http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | exceptional return of http.cr ... md);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | exceptional return of http.cr ... md);\\n}) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | http.cr ... md);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | http.cr ... md);\\n}) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:6:18:17 | createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:6:18:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:6:18:17 | createServer | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | CalleeFlexibleAccessPath | http.createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | receiverName | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | CalleeFlexibleAccessPath | execSh | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | asyncEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | execEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec = ... ').exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec = ... ').exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec = ... ').exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:18 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:18 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | exceptional return of require ... ocess') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | exceptional return of require ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | require ... ocess') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | require ... ocess') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:40 | require ... ').exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:40 | require ... ').exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:40 | require ... ').exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:37:1:40 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:37:1:40 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:37:1:40 | exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | functio ... })();\\n} | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | functio ... })();\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | functio ... })();\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n }) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n }) | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n }) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n }) | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n }) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n })() | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n })() | contextSurroundingFunctionParameters | (arr, iterator) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n })() | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n })() | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n })() | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n })() | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n })() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n })() | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n })() | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n })() | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n } | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n } | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n } | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n } | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n } | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n }) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n }) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n }) | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n }) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n }) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n }) | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n }) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n }) | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n }) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | CalleeFlexibleAccessPath | iterator | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | contextSurroundingFunctionParameters | (arr, iterator)\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | iterator | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n } | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n } | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n } | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n } | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n } | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | CalleeFlexibleAccessPath | process.nextTick | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | calleeImports | process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | enclosingFunctionName | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | receiverName | process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | functio ... T OK \\n} | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | functio ... T OK \\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | functio ... T OK \\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextSurroundingFunctionParameters | (commands) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextSurroundingFunctionParameters | (commands) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | contextSurroundingFunctionParameters | (commands) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | contextSurroundingFunctionParameters | (commands) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | CalleeFlexibleAccessPath | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | contextSurroundingFunctionParameters | (commands) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | CalleeFlexibleAccessPath | asyncEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | contextSurroundingFunctionParameters | (commands)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextSurroundingFunctionParameters | (commands)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | contextSurroundingFunctionParameters | (commands)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | contextSurroundingFunctionParameters | (commands)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | contextSurroundingFunctionParameters | (commands)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | enclosingFunctionBody | commands asyncEach commands command exec command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | enclosingFunctionName | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:7 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:7 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:7 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | exceptional return of require('http') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | exceptional return of require('http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | require('http') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | require('http') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:28 | require ... eServer | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:28 | require ... eServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:28 | require ... eServer | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | exceptional return of require ... d]);\\n}) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | exceptional return of require ... d]);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | exceptional return of require ... d]);\\n}) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | require ... d]);\\n}) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | require ... d]);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | require ... d]);\\n}) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:17:17:28 | createServer | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:17:17:28 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:17:17:28 | createServer | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | CalleeFlexibleAccessPath | import(!).createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | CalleeFlexibleAccessPath | import(!).parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | CalleeFlexibleAccessPath | import(!).parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | CalleeFlexibleAccessPath | execEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionName | createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | fileImports | child_process http url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:0 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | Busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | Busboy | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | Busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | formidable | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | formidable | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | formidable | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | multiparty | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | multiparty | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | multiparty | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:11 | express | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:11 | express | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express ... press') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:21 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:21 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | exceptional return of require('express') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | require('express') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | require('express') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:10 | multer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:10 | multer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:10 | multer | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer ... ulter') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer ... ulter') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer ... ulter') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:21 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:21 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | exceptional return of require('multer') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | exceptional return of require('multer') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | exceptional return of require('multer') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | require('multer') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | require('multer') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | require('multer') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:10 | upload | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:10 | upload | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:10 | upload | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload ... ds/' }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload ... ds/' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload ... ds/' }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:19 | multer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:19 | multer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:19 | multer | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | exceptional return of multer( ... ds/' }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | exceptional return of multer( ... ds/' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | exceptional return of multer( ... ds/' }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | multer( ... ds/' }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | multer( ... ds/' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | multer( ... ds/' }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | CalleeFlexibleAccessPath | multer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | calleeImports | multer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:26 | dest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:26 | dest | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:26 | dest | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | CalleeFlexibleAccessPath | multer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | InputAccessPathFromCallee | 0.dest | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | assignedToPropName | dest | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | calleeImports | multer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:7 | app | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:7 | app | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app = express() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app = express() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:17 | express | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:17 | express | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | exceptional return of express() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | express() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | express() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec = ... ").exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec = ... ").exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec = ... ").exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:18 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:18 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | exceptional return of require ... ocess") | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | require ... ocess") | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:40 | require ... ").exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:40 | require ... ").exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:40 | require ... ").exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:37:6:40 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:37:6:40 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:37:6:40 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:3 | app | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:3 | app | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:8 | app.post | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:8 | app.post | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | app.pos ... T OK\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:5:8:8 | post | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:5:8:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:5:8:8 | post | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:27 | upload | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:27 | upload | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:27 | upload | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:34 | upload.single | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:34 | upload.single | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:34 | upload.single | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | exceptional return of upload. ... vatar') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | exceptional return of upload. ... vatar') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | exceptional return of upload. ... vatar') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:29:8:34 | single | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:29:8:34 | single | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:29:8:34 | single | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | CalleeFlexibleAccessPath | upload.single | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | calleeImports | multer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | receiverName | upload | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | stringConcatenatedWith | -endpoint- req.file.originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch ... nalname | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | stringConcatenatedWith | 'touch ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | enclosingFunctionBody | req res next exec touch req file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:3 | app | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:3 | app | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:8 | app.post | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:8 | app.post | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | app.pos ... })\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | app.pos ... })\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | app.pos ... })\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | exceptional return of app.pos ... })\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | exceptional return of app.pos ... })\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | exceptional return of app.pos ... })\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:5:12:8 | post | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:5:12:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:5:12:8 | post | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:33 | upload | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:33 | upload | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:33 | upload | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:39 | upload.array | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:39 | upload.array | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:39 | upload.array | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | exceptional return of upload. ... s', 12) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | exceptional return of upload. ... s', 12) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | exceptional return of upload. ... s', 12) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:35:12:39 | array | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:35:12:39 | array | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:35:12:39 | array | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | CalleeFlexibleAccessPath | upload.array | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | calleeImports | multer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | receiverName | upload | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | CalleeFlexibleAccessPath | upload.array | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | calleeImports | multer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | receiverName | upload | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n })\\n} | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n })\\n} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n })\\n} | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n })\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n })\\n} | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n })\\n} | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n })\\n} | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n }) | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n }) | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n }) | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ... OK\\n } | CalleeFlexibleAccessPath | req.files.forEach | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ... OK\\n } | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ... OK\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ... OK\\n } | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ... OK\\n } | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ... OK\\n } | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ... OK\\n } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | stringConcatenatedWith | -endpoint- file.originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch ... nalname | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | stringConcatenatedWith | 'touch ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | contextSurroundingFunctionParameters | (req, res, next)\n(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | enclosingFunctionBody | req res next req files forEach file exec touch file originalname | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:8 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:8 | http | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http = ... 'http') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http = ... 'http') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:18 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:18 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | exceptional return of require('http') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | exceptional return of require('http') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | require('http') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | require('http') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy ... usboy') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy ... usboy') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy ... usboy') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:20 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:20 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:20 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | exceptional return of require('busboy') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | exceptional return of require('busboy') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | exceptional return of require('busboy') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | require('busboy') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | require('busboy') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | require('busboy') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:4 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:4 | http | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:17 | http.createServer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:17 | http.createServer | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | exceptional return of http.cr ... oy);\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | exceptional return of http.cr ... oy);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | exceptional return of http.cr ... oy);\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | http.cr ... oy);\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | http.cr ... oy);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | http.cr ... oy);\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:9 | http.cr ... .listen | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:9 | http.cr ... .listen | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:9 | http.cr ... .listen | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | exceptional return of http.cr ... n(8000) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | exceptional return of http.cr ... n(8000) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | exceptional return of http.cr ... n(8000) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | http.cr ... n(8000) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | http.cr ... n(8000) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | http.cr ... n(8000) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:6:22:17 | createServer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:6:22:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:6:22:17 | createServer | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | CalleeFlexibleAccessPath | http.createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | receiverName | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy ... ders }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy ... ders }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy ... ders }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy ... ders }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy ... ders }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | CalleeFlexibleAccessPath | Busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | calleeImports | busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | CalleeFlexibleAccessPath | Busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | InputAccessPathFromCallee | ?.headers | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | assignedToPropName | headers | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | calleeImports | busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | CalleeFlexibleAccessPath | busboy.on | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | calleeImports | busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | receiverName | busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | CalleeFlexibleAccessPath | busboy.on | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | calleeImports | busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ... OK\\n } | receiverName | busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | stringConcatenatedWith | -endpoint- filename | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | stringConcatenatedWith | 'touch ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | CalleeFlexibleAccessPath | req.pipe | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch filename req pipe busboy | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | receiverName | req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:4:28:9 | listen | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:4:28:9 | listen | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:4:28:9 | listen | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | CalleeFlexibleAccessPath | http.createServer().listen | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formida ... dable') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formida ... dable') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formida ... dable') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formidable | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formidable | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formidable | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:26 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:26 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | exceptional return of require ... dable') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | exceptional return of require ... dable') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | exceptional return of require ... dable') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | require ... dable') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | require ... dable') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | require ... dable') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:3 | app | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:3 | app | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:8 | app.post | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:8 | app.post | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:8 | app.post | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | app.pos ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | app.pos ... });\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | exceptional return of app.pos ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | exceptional return of app.pos ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | exceptional return of app.pos ... });\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:5:32:8 | post | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:5:32:8 | post | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:5:32:8 | post | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ... });\\n} | CalleeFlexibleAccessPath | app.post | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ... });\\n} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ... });\\n} | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ... });\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ... });\\n} | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ... });\\n} | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ... });\\n} | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form = ... true }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form = ... true }) | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form = ... true }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form = ... true }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form = ... true }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | CalleeFlexibleAccessPath | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | calleeImports | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | CalleeFlexibleAccessPath | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | InputAccessPathFromCallee | 0.multiples | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | assignedToPropName | multiples | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | calleeImports | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n }) | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | CalleeFlexibleAccessPath | form.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | calleeImports | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | receiverName | form | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | CalleeFlexibleAccessPath | form.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | calleeImports | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ... OK\\n } | receiverName | form | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | stringConcatenatedWith | -endpoint- fields.name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch ... ds.name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | stringConcatenatedWith | 'touch ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n }) | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n }) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | CalleeFlexibleAccessPath | form2.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | calleeImports | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | contextSurroundingFunctionParameters | (req, res, next) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | receiverName | form2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | CalleeFlexibleAccessPath | form2.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | calleeImports | formidable | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ... OK\\n } | receiverName | form2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | stringConcatenatedWith | -endpoint- fields.name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch ... ds.name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | stringConcatenatedWith | 'touch ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch fields name form2 formidable IncomingForm form2 parse req err fields files exec touch fields name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | enclosingFunctionName | app.post#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multipa ... party') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multipa ... party') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multipa ... party') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multiparty | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multiparty | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multiparty | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:24 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:24 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | exceptional return of require ... party') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | exceptional return of require ... party') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | exceptional return of require ... party') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | require ... party') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | require ... party') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | require ... party') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:8 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:8 | http | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http = ... 'http') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http = ... 'http') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:18 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:18 | require | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | exceptional return of require('http') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | exceptional return of require('http') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | require('http') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | require('http') | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:4 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:4 | http | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:17 | http.createServer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:17 | http.createServer | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | exceptional return of http.cr ... q);\\n\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | exceptional return of http.cr ... q);\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | exceptional return of http.cr ... q);\\n\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | http.cr ... q);\\n\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | http.cr ... q);\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | http.cr ... q);\\n\\n}) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:9 | http.cr ... .listen | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:9 | http.cr ... .listen | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:9 | http.cr ... .listen | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | exceptional return of http.cr ... n(8080) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | exceptional return of http.cr ... n(8080) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | exceptional return of http.cr ... n(8080) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | http.cr ... n(8080) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | http.cr ... n(8080) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | http.cr ... n(8080) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:6:48:17 | createServer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:6:48:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:6:48:17 | createServer | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | CalleeFlexibleAccessPath | http.createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | receiverName | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form = ... .Form() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form = ... .Form() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form = ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form = ... .Form() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form = ... .Form() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | CalleeFlexibleAccessPath | form.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | calleeImports | multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | receiverName | form | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | CalleeFlexibleAccessPath | form.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | calleeImports | multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ... OK\\n } | receiverName | form | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | stringConcatenatedWith | -endpoint- fields.name | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch ... ds.name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | stringConcatenatedWith | 'touch ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n }) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | CalleeFlexibleAccessPath | form2.on | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | calleeImports | multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | receiverName | form2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | CalleeFlexibleAccessPath | form2.on | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | calleeImports | multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ... OK\\n } | receiverName | form2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | stringConcatenatedWith | -endpoint- part.filename | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch ... ilename | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | stringConcatenatedWith | 'touch ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | contextSurroundingFunctionParameters | (req, res)\n(part) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | CalleeFlexibleAccessPath | form2.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | calleeImports | multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch fields name form2 multiparty Form form2 on part part exec touch part filename form2 parse req | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | receiverName | form2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:4:63:9 | listen | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:4:63:9 | listen | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:4:63:9 | listen | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | CalleeFlexibleAccessPath | http.createServer().listen | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | fileImports | busboy child_process express formidable http multer multiparty | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | this | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:8 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:8 | http | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http = ... "http") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http = ... "http") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http = ... "http") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:18 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:18 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | exceptional return of require("http") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | exceptional return of require("http") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | exceptional return of require("http") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | require("http") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | require("http") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | require("http") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url = require("url") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url = require("url") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url = require("url") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:17 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:17 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | exceptional return of require("url") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | exceptional return of require("url") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | exceptional return of require("url") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | require("url") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | require("url") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | require("url") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:4:10 | server | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:4:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:4:10 | server | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:35:2 | server ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:35:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:35:2 | server ... T OK\\n}) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:17 | http | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:17 | http | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:30 | http.createServer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:30 | http.createServer | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | http.cr ... T OK\\n}) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:19:4:30 | createServer | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:19:4:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:19:4:30 | createServer | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | calleeImports | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | CalleeFlexibleAccessPath | import(!).sync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | CalleeFlexibleAccessPath | import(!).shell | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | CalleeFlexibleAccessPath | import(!).shellSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | CalleeFlexibleAccessPath | import(!).stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | CalleeFlexibleAccessPath | import(!).stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | CalleeFlexibleAccessPath | import(!).sync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | calleeImports | cross-spawn-async | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | calleeImports | exec-async | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | calleeImports | remote-exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | calleeImports | remote-exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 = ... "ssh2") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 = ... "ssh2") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 = ... "ssh2") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 = ... "ssh2") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 = ... "ssh2") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | CalleeFlexibleAccessPath | ssh2().exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | calleeImports | ssh2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | CalleeFlexibleAccessPath | ssh2.Client().exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | calleeImports | ssh2 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | CalleeFlexibleAccessPath | SSH2Stream().exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | calleeImports | ssh2-streams | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | CalleeFlexibleAccessPath | SSH2Stream().exec | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | calleeImports | ssh2-streams | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | CalleeFlexibleAccessPath | import(!).node | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | calleeImports | foreground-child | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener ... pener") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener ... pener") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener ... pener") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener ... pener") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener ... pener") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | stringConcatenatedWith | -endpoint- url.parse().query.user | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | CalleeFlexibleAccessPath | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | calleeImports | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | stringConcatenatedWith | 'http://github.com/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | CalleeFlexibleAccessPath | url.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | calleeImports | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | receiverName | url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ... cmd }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ... cmd }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ... cmd }) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ... cmd }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ... cmd }) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ... cmd }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ... cmd }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ... cmd }) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ... cmd }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ... cmd }) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | CalleeFlexibleAccessPath | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | calleeImports | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | CalleeFlexibleAccessPath | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | calleeImports | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | CalleeFlexibleAccessPath | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | InputAccessPathFromCallee | 1.command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | assignedToPropName | command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | calleeImports | opener | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:0 | this | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | cp | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | require | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:9 | https | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:9 | https | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:9 | https | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https = ... https") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https = ... https") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https = ... https") | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:19 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:19 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:19 | require | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | exceptional return of require("https") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | exceptional return of require("https") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | exceptional return of require("https") | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | require("https") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | require("https") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | require("https") | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp = re ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp = re ... ocess") | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:16 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:16 | require | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | exceptional return of require ... ocess") | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | require ... ocess") | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:5 | https | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:5 | https | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:5 | https | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:9 | https.get | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:9 | https.get | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:9 | https.get | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | exceptional return of https.g ... })\\n) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | exceptional return of https.g ... })\\n) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | exceptional return of https.g ... })\\n) | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | https.g ... })\\n) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | https.g ... })\\n) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | https.g ... })\\n) | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:7:4:9 | get | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:7:4:9 | get | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:7:4:9 | get | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | CalleeFlexibleAccessPath | https.get | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | calleeImports | https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | receiverName | https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextSurroundingFunctionParameters | (res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n }) | CalleeFlexibleAccessPath | https.get | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n }) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n }) | calleeImports | https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n }) | contextSurroundingFunctionParameters | (res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n }) | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n }) | receiverName | https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | contextSurroundingFunctionParameters | (res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | contextSurroundingFunctionParameters | (res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n }) | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n }) | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n }) | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n }) | contextSurroundingFunctionParameters | (res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n }) | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n }) | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n }) | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | contextSurroundingFunctionParameters | (res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | CalleeFlexibleAccessPath | res.on | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | contextSurroundingFunctionParameters | (res) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | receiverName | res | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextSurroundingFunctionParameters | (res)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | CalleeFlexibleAccessPath | res.on | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | contextSurroundingFunctionParameters | (res)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n } | receiverName | res | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | contextSurroundingFunctionParameters | (res)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | contextSurroundingFunctionParameters | (res)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | contextSurroundingFunctionParameters | (res)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | contextSurroundingFunctionParameters | (res)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | contextSurroundingFunctionParameters | (res)\n(command) | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | enclosingFunctionBody | res res on data command cp execSync command | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | enclosingFunctionName | https.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | fileImports | child_process https | +| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp = re ... ocess") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:16 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:16 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | require ... ocess") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:1:21:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:1:21:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:1:21:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- process.argv.0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- process.argv.1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- process.argv.2 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args = ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args = ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args = ... lice(2) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args = ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args = ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | CalleeFlexibleAccessPath | process.argv.slice | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | stringConcatenatedWith | -endpoint- args.0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | CalleeFlexibleAccessPath | args.slice | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | receiverName | args | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | stringConcatenatedWith | -endpoint- fewerArgs.0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | stringConcatenatedWith | -endpoint- arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh process 0 argv 0 cp exec cmd.sh process 1 argv 1 cp exec cmd.sh process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh arg0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:1:28:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:1:28:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:1:28:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args = ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args = ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args = ... lice(2) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args = ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args = ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | CalleeFlexibleAccessPath | process.argv.slice | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script ... ex.js') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script ... ex.js') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script ... ex.js') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script ... ex.js') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script ... ex.js') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node | stringConcatenatedWith | -endpoint- script + ' ' + args.0 + ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | stringConcatenatedWith | 'node ' -endpoint- ' ' + args.0 + ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 | | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 | | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 | | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 | | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 | | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 | | stringConcatenatedWith | 'node ' + script -endpoint- args.0 + ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | stringConcatenatedWith | 'node ' + script + ' ' -endpoint- ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 | --option" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 | --option" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 | --option" | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 | --option" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 | --option" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 | --option" | stringConcatenatedWith | 'node ' + script + ' ' + args.0 -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node | stringConcatenatedWith | -endpoint- script + ' ' + args.join() + ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | stringConcatenatedWith | 'node ' -endpoint- ' ' + args.join() + ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 | | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 | | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 | | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 | | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 | | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 | | stringConcatenatedWith | 'node ' + script -endpoint- args.join() + ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | stringConcatenatedWith | 'node ' + script + ' ' -endpoint- ' --option"' | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | CalleeFlexibleAccessPath | args.join | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | receiverName | args | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 | --option" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 | --option" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 | --option" | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node script args 0 0 --option" cp execSync node script args join --option" | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 | --option" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 | --option" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 | --option" | stringConcatenatedWith | 'node ' + script + ' ' + args.join() -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:2 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:2 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:7 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:7 | cp.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | cp.exec ... ().foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:4:30:7 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:4:30:7 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:4:30:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | stringConcatenatedWith | -endpoint- import(!)().foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:27 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | exceptional return of require ... -args") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | exceptional return of require ... -args") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | exceptional return of require ... -args") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | require ... -args") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | require ... -args") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | require ... -args") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | exceptional return of require ... rgs")() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | exceptional return of require ... rgs")() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | exceptional return of require ... rgs")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | require ... rgs")() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | require ... rgs")() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | require ... rgs")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:48:30:50 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:48:30:50 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:48:30:50 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:2 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:2 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:7 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:7 | cp.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | cp.exec ... ().foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:4:31:7 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:4:31:7 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:4:31:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | stringConcatenatedWith | -endpoint- import(!)().foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:27 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | exceptional return of require("minimist") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | exceptional return of require("minimist") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | exceptional return of require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | require("minimist") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | require("minimist") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | exceptional return of require ... ist")() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | exceptional return of require ... ist")() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | exceptional return of require ... ist")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | require ... ist")() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | require ... ist")() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | require ... ist")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:43:31:45 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:43:31:45 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:43:31:45 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:2 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:2 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:7 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:7 | cp.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | cp.exec ... gv.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | cp.exec ... gv.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | exceptional return of cp.exec ... gv.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | exceptional return of cp.exec ... gv.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | exceptional return of cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:4:32:7 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:4:32:7 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:4:32:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | stringConcatenatedWith | -endpoint- import(!).argv.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:27 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | exceptional return of require("yargs") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | exceptional return of require("yargs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | exceptional return of require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | require("yargs") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | require("yargs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:41 | require ... ").argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:41 | require ... ").argv | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:41 | require ... ").argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:38:32:41 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:38:32:41 | argv | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:38:32:41 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:43:32:45 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:43:32:45 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:43:32:45 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:2 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:2 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:7 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:7 | cp.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | cp.exec ... gv.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | cp.exec ... gv.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | exceptional return of cp.exec ... gv.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | exceptional return of cp.exec ... gv.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | exceptional return of cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:4:33:7 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:4:33:7 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:4:33:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | stringConcatenatedWith | -endpoint- import(!).argv.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:27 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | exceptional return of require("optimist") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | exceptional return of require("optimist") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | exceptional return of require("optimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | require("optimist") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | require("optimist") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | require("optimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:44 | require ... ").argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:44 | require ... ").argv | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:44 | require ... ").argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:41:33:44 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:41:33:44 | argv | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:41:33:44 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:46:33:48 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:46:33:48 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:46:33:48 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:1:44:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:1:44:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:1:44:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args = ... \\t\\t.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args = ... \\t\\t.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args = ... \\t\\t.argv | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args = ... \\t\\t.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args = ... \\t\\t.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | CalleeFlexibleAccessPath | import(!).command | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | CalleeFlexibleAccessPath | import(!).command | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | CalleeFlexibleAccessPath | import(!).command | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | contextSurroundingFunctionParameters | ()\n(yargs) | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | contextSurroundingFunctionParameters | ()\n(yargs) | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | CalleeFlexibleAccessPath | import(!).command().option | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | CalleeFlexibleAccessPath | import(!).command().option | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | CalleeFlexibleAccessPath | import(!).command().option | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | InputAccessPathFromCallee | 1.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | assignedToPropName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- args | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- import(!).array().parse().foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | CalleeFlexibleAccessPath | import(!).array | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh args cp exec cmd.sh require yargs array foo parse foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:1:73:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:1:73:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:1:73:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | CalleeFlexibleAccessPath | import(!).usage | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | calleeImports | yargs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- args | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | assignedToPropName | taint1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | assignedToPropName | taint2 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- taint1rest | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- taint2rest | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- taint3 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh taint1rest cp exec cmd.sh taint2rest taint3 require yargs argv cp exec cmd.sh taint3 taint4 require yargs argv cp exec cmd.sh taint4 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:93:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:93:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:93:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | exceptional return of (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | exceptional return of (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | exceptional return of (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv = ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv = ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv = ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv = ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv = ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | CalleeFlexibleAccessPath | process.argv.slice | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- minimist().foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | CalleeFlexibleAccessPath | minimist | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | calleeImports | minimist | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg ... ubarg') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg ... ubarg') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg ... ubarg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg ... ubarg') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg ... ubarg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- subarg().foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | CalleeFlexibleAccessPath | subarg | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | calleeImports | subarg | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | CalleeFlexibleAccessPath | process.argv.slice | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- yargsParser().foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | CalleeFlexibleAccessPath | yargsParser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | calleeImports | yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | CalleeFlexibleAccessPath | process.argv.slice | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import ... 'args' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import ... 'args' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import ... 'args' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import ... 'args' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import ... 'args' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:19:87:24 | 'args' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:19:87:24 | 'args' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:19:87:24 | 'args' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | CalleeFlexibleAccessPath | args.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | calleeImports | args | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | receiverName | args | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- flags.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | calleeImports | arg | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | InputAccessPathFromCallee | 0.? | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | calleeImports | arg | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- flags.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh minimist argv foo subarg require subarg cp exec cmd.sh subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh flags foo flags require arg spec cp exec cmd.sh flags foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser ... mple'}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser ... mple'}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser ... mple'}) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser ... mple'}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser ... mple'}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | CalleeFlexibleAccessPath | ArgumentParser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | calleeImports | argparse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | CalleeFlexibleAccessPath | ArgumentParser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | InputAccessPathFromCallee | ?.description | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | assignedToPropName | description | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | calleeImports | argparse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | CalleeFlexibleAccessPath | parser.add_argument | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | calleeImports | argparse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | receiverName | parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | CalleeFlexibleAccessPath | parser.add_argument | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | calleeImports | argparse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | receiverName | parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | CalleeFlexibleAccessPath | parser.add_argument | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | calleeImports | argparse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | receiverName | parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | CalleeFlexibleAccessPath | parser.add_argument | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | InputAccessPathFromCallee | 2.help | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | assignedToPropName | help | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | calleeImports | argparse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- parser.parse_args().foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh parser parse_args foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:1:109:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:1:109:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:1:109:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | CalleeFlexibleAccessPath | commandLineArgs | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | calleeImports | command-line-args | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- options.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh options foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:1:117:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:1:117:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:1:117:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow = ... 'meow') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow = ... 'meow') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow = ... 'meow') | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow = ... 'meow') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow = ... 'meow') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | CalleeFlexibleAccessPath | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | calleeImports | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | stringConcatenatedWith | -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | CalleeFlexibleAccessPath | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | calleeImports | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | CalleeFlexibleAccessPath | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | InputAccessPathFromCallee | 1.flags | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | assignedToPropName | flags | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | calleeImports | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | CalleeFlexibleAccessPath | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | InputAccessPathFromCallee | 1.flags.? | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | calleeImports | meow | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- cli.input.0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh cli 0 input 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:1:130:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:1:130:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:1:130:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts = ... tions}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts = ... tions}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts = ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts = ... tions}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts = ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | CalleeFlexibleAccessPath | dashdash.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | calleeImports | dashdash | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | receiverName | dashdash | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | CalleeFlexibleAccessPath | dashdash.parse | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | InputAccessPathFromCallee | 0.options | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | assignedToPropName | options | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | calleeImports | dashdash | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- opts.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser ... tions}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser ... tions}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser ... tions}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | CalleeFlexibleAccessPath | dashdash.createParser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | calleeImports | dashdash | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | receiverName | dashdash | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | CalleeFlexibleAccessPath | dashdash.createParser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | InputAccessPathFromCallee | 0.options | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | assignedToPropName | options | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | calleeImports | dashdash | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts = ... parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts = ... parse() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts = ... parse() | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts = ... parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts = ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- opts.foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh opts foo | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:1:138:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:1:138:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:1:138:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | CalleeFlexibleAccessPath | program.version | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | calleeImports | commander | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | receiverName | program | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- program.opts().pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- program.pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:1:147:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:1:147:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:1:147:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | CalleeFlexibleAccessPath | program.version | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | calleeImports | commander | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | receiverName | program | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- program.opts().pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | stringConcatenatedWith | -endpoint- program.pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh program opts pizzaType cp exec cmd.sh program pizzaType | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:0 | this | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:0 | this | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | require | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | require | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:13 | express | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:13 | express | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express ... press") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express ... press") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:23 | require | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:23 | require | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | exceptional return of require("express") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | require("express") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | require("express") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:9 | app | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:9 | app | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app = express() | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app = express() | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:19 | express | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:19 | express | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | exceptional return of express() | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | exceptional return of express() | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | express() | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | express() | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:18 | { execFile } | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:18 | { execFile } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:18 | { execFile } | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | { execF ... ocess") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | { execF ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | { execF ... ocess") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:28 | require | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:28 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:28 | require | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | exceptional return of require ... ocess") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | exceptional return of require ... ocess") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | require ... ocess") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | require ... ocess") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:3 | app | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:3 | app | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:7 | app.get | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:7 | app.get | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | app.get ... / OK\\n}) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | exceptional return of app.get ... / OK\\n}) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:5:5:7 | get | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:5:5:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:5:5:7 | get | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | CalleeFlexibleAccessPath | app.get | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote ... .remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote ... .remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote ... .remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote ... .remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote ... .remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | CalleeFlexibleAccessPath | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | CalleeFlexibleAccessPath | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs ... ry.args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs ... ry.args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs ... ry.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs ... ry.args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs ... ry.args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | CalleeFlexibleAccessPath | remote.startsWith | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | receiverName | remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | CalleeFlexibleAccessPath | remote.startsWith | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | receiverName | remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | CalleeFlexibleAccessPath | ?.concat | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | CalleeFlexibleAccessPath | ?.concat | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | CalleeFlexibleAccessPath | ?.concat | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | enclosingFunctionName | app.get#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | functio ... here\\n} | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | functio ... here\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | functio ... here\\n} | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | contextSurroundingFunctionParameters | (cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | enclosingFunctionBody | cmd args execFile cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:3 | app | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:3 | app | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:10 | app.listen | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:10 | app.listen | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:10 | app.listen | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | app.lis ... 000!")) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | app.lis ... 000!")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | app.lis ... 000!")) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | exceptional return of app.lis ... 000!")) | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | exceptional return of app.lis ... 000!")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | exceptional return of app.lis ... 000!")) | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:5:53:10 | listen | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:5:53:10 | listen | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:5:53:10 | listen | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | CalleeFlexibleAccessPath | app.listen | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | CalleeFlexibleAccessPath | app.listen | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | calleeImports | express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | receiverName | app | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | contextFunctionInterfaces | indirect(cmd, args) | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | enclosingFunctionBody | console log Example app listening on port 3000! | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | enclosingFunctionName | app.listen#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | fileImports | child_process express | +| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ... 3000!" | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | __dirname | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | this | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | __dirname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | __dirname | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | __dirname | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | cp | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | execa | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | execa | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | execa | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | require | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp = re ... ocess') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp = re ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp = re ... ocess') | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:16 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:16 | require | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | exceptional return of require ... ocess') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | exceptional return of require ... ocess') | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | require ... ocess') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | require ... ocess') | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path = ... 'path') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path = ... 'path') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path = ... 'path') | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:18 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:18 | require | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | exceptional return of require('path') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | exceptional return of require('path') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | exceptional return of require('path') | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | require('path') | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | require('path') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | require('path') | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa = ... execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa = ... execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa = ... execa") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:19 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:19 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:19 | require | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | exceptional return of require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | exceptional return of require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | exceptional return of require("execa") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | require("execa") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | require("execa") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | require("execa") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:1:13:2 | (functi ... / OK\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:1:13:2 | (functi ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:1:13:2 | (functi ... / OK\\n}) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | functio ... // OK\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | functio ... // OK\\n} | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | stringConcatenatedWith | -endpoint- path.join() | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | CalleeFlexibleAccessPath | cp.execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | stringConcatenatedWith | -endpoint- path.join() | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | CalleeFlexibleAccessPath | execa.shell | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | receiverName | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | stringConcatenatedWith | -endpoint- path.join() | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | CalleeFlexibleAccessPath | execa.shellSync | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | receiverName | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe = ... + "\\"" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe = ... + "\\"" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe = ... + "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe = ... + "\\"" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe = ... + "\\"" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | stringConcatenatedWith | -endpoint- path.join() + '"' | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" + ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" + ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" + ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" + ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" + ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" + ... + "\\"" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" + ... + "\\"" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" + ... + "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" + ... + "\\"" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" + ... + "\\"" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | stringConcatenatedWith | '"' -endpoint- '"' | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | stringConcatenatedWith | '"' + path.join() -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | stringConcatenatedWith | -endpoint- safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | CalleeFlexibleAccessPath | execa.shellSync | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | calleeImports | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | receiverName | execa | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf path join __dirname temp execa shell rm -rf path join __dirname temp execa shellSync rm -rf path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf safe | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | fileImports | child_process execa path | +| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:0 | this | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | cp | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | module | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | require | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp = re ... ocess") | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:18 | require | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:18 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | require ... ocess") | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:6 | module | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:14 | module.exports | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:35 | module. ... mported | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:35 | module. ... mported | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:35 | module. ... mported | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:7:1 | module. ... OT OK\\n} | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:7:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:7:1 | module. ... OT OK\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:8:5:14 | exports | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:8:5:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:8:5:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:16:5:35 | thisMethodIsImported | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:16:5:35 | thisMethodIsImported | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:16:5:35 | thisMethodIsImported | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | assignedToPropName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | contextFunctionInterfaces | thisMethodIsImported(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | enclosingFunctionName | thisMethodIsImported | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:16 | require | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:16 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:5:1 | module. ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:5:1 | module. ... dule.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:5:1 | module. ... dule.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:8:3:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:6 | module | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:14 | module.exports | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:18 | module.exports.foo | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:18 | module.exports.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:18 | module.exports.foo | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:9:1 | module. ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:9:1 | module. ... dule.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:9:1 | module. ... dule.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:8:7:14 | exports | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:8:7:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:8:7:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:16:7:18 | foo | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:16:7:18 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:16:7:18 | foo | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | assignedToPropName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | contextFunctionInterfaces | exports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | asyncExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | boundProblem | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | build | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | id | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | sanitizeShellString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | yetAnohterSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp = re ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:16 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:16 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:8:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:8:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:8:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:8:3:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:8:3:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile name name cp execFile name name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:18 | module.exports.foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:18 | module.exports.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:18 | module.exports.foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:12:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:12:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:12:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:8:10:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:8:10:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:8:10:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:16:10:18 | foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:16:10:18 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:16:10:18 | foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | assignedToPropName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:18 | module.exports.foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:18 | module.exports.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:18 | module.exports.foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:22 | module. ... foo.bar | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:22 | module. ... foo.bar | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:22 | module. ... foo.bar | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:16:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:16:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:16:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:8:14:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:8:14:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:8:14:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:16:14:18 | foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:16:14:18 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:16:14:18 | foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:20:14:22 | bar | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:20:14:22 | bar | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:20:14:22 | bar | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | assignedToPropName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | enclosingFunctionName | cla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | enclosingFunctionName | cla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | enclosingFunctionName | cla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | function cla() { } | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | function cla() { } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | function cla() { } | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | enclosingFunctionName | cla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:3 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:3 | cla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:3 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:13 | cla.prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:13 | cla.prototype | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:13 | cla.prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:20 | cla.prototype.method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:20 | cla.prototype.method | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:20 | cla.prototype.method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:21:1 | cla.pro ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:21:1 | cla.pro ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:21:1 | cla.pro ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:5:19:13 | prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:5:19:13 | prototype | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:5:19:13 | prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:15:19:20 | method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:15:19:20 | method | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:15:19:20 | method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | assignedToPropName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:26 | module. ... w cla() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:26 | module. ... w cla() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:26 | module. ... w cla() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:8:22:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:8:22:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:8:22:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | exceptional return of new cla() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | exceptional return of new cla() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | exceptional return of new cla() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:22:22:24 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:22:22:24 | cla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:22:22:24 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | enclosingFunctionName | cla2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | enclosingFunctionName | cla2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | enclosingFunctionName | cla2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | function cla2() { } | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | function cla2() { } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | function cla2() { } | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | enclosingFunctionName | cla2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:4 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:4 | cla2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:4 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:14 | cla2.prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:14 | cla2.prototype | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:14 | cla2.prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:21 | cla2.pr ... .method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:21 | cla2.pr ... .method | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:21 | cla2.pr ... .method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:28:1 | cla2.pr ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:28:1 | cla2.pr ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:28:1 | cla2.pr ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:6:26:14 | prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:6:26:14 | prototype | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:6:26:14 | prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:16:26:21 | method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:16:26:21 | method | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:16:26:21 | method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | assignedToPropName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | enclosingFunctionName | method | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:18 | module.exports.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:18 | module.exports.bla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:18 | module.exports.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:31 | module. ... cla2() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:31 | module. ... cla2() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:31 | module. ... cla2() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:8:29:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:8:29:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:8:29:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:16:29:18 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:16:29:18 | bla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:16:29:18 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | exceptional return of new cla2() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | exceptional return of new cla2() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | exceptional return of new cla2() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | assignedToPropName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:26:29:29 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:26:29:29 | cla2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:26:29:29 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:19 | module.exports.lib2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:19 | module.exports.lib2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:19 | module.exports.lib2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:42 | module. ... b2.js") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:42 | module. ... b2.js") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:42 | module. ... b2.js") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:8:31:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:8:31:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:8:31:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:16:31:19 | lib2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:16:31:19 | lib2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:16:31:19 | lib2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:29 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:29 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:29 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | exceptional return of require("./lib2.js") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | exceptional return of require("./lib2.js") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | exceptional return of require("./lib2.js") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | assignedToPropName | lib2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | class C ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | class C ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | class C ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:7:33:10 | Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:7:33:10 | Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:7:33:10 | Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:34:12 | constructor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:34:12 | constructor | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:34:12 | constructor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name) ... T OK\\n\\t} | assignedToPropName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name) ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name) ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name) ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:9:37:11 | foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:9:37:11 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:9:37:11 | foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name) ... T OK\\n\\t} | assignedToPropName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name) ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name) ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name) ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:40:4 | bar | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:40:4 | bar | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:40:4 | bar | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name) ... / OK\\n\\t} | assignedToPropName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name) ... / OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name) ... / OK\\n\\t} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name) ... / OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | stringConcatenatedWith | -endpoint- notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | enclosingFunctionBody | name cp exec rm -rf name cp exec rm -rf notASource | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | enclosingFunctionName | bar | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:19 | module.exports.cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:19 | module.exports.cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:19 | module.exports.cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:26 | module. ... = Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:26 | module. ... = Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:26 | module. ... = Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:8:47:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:8:47:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:8:47:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:16:47:19 | cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:16:47:19 | cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:16:47:19 | cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | assignedToPropName | cla3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:17 | module.exports.mz | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:17 | module.exports.mz | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:17 | module.exports.mz | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:51:1 | module. ... T OK.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:51:1 | module. ... T OK.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:51:1 | module. ... T OK.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:8:49:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:8:49:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:8:49:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:16:49:17 | mz | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:16:49:17 | mz | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:16:49:17 | mz | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | assignedToPropName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | CalleeFlexibleAccessPath | import(!).exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | calleeImports | mz/child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | enclosingFunctionBody | name require mz/child_process exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | enclosingFunctionName | mz | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:19 | module.exports.flow | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:19 | module.exports.flow | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:19 | module.exports.flow | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:62:1 | module. ... md2);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:62:1 | module. ... md2);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:62:1 | module. ... md2);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:8:53:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:8:53:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:8:53:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:16:53:19 | flow | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:16:53:19 | flow | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:16:53:19 | flow | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | assignedToPropName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 = ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 = ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 = ... + name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 = ... + name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 = ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 = ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 = ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 = ... + name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 = ... + name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 = ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextSurroundingFunctionParameters | (cmd) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextSurroundingFunctionParameters | (cmd) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | contextSurroundingFunctionParameters | (cmd) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | contextSurroundingFunctionParameters | (cmd) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | contextSurroundingFunctionParameters | (cmd) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | contextSurroundingFunctionParameters | (cmd) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | contextSurroundingFunctionParameters | (cmd) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | CalleeFlexibleAccessPath | myExec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | enclosingFunctionBody | name cmd1 rm -rf name cp exec cmd1 cmd2 rm -rf name myExec cmd cp exec cmd myExec cmd2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | enclosingFunctionName | flow | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:27 | module. ... gConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:27 | module. ... gConcat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:27 | module. ... gConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:80:1 | module. ... . \\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:80:1 | module. ... . \\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:80:1 | module. ... . \\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:8:64:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:8:64:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:8:64:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:16:64:27 | stringConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:16:64:27 | stringConcat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:16:64:27 | stringConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... . \\n} | assignedToPropName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... . \\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... . \\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... . \\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | stringConcatenatedWith | -endpoint- name + ') do bla end' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ... + name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ... + name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | stringConcatenatedWith | 'for foo in (' -endpoint- ') do bla end' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | stringConcatenatedWith | 'for foo in (' + name -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ... + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | stringConcatenatedWith | 'cat /foO/BAR/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | stringConcatenatedWith | -endpoint- name + '"' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ... + "\\"" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | stringConcatenatedWith | 'cat "' -endpoint- '"' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | stringConcatenatedWith | 'cat "' + name -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ... + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ... + "'") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ... + "'") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ... + "'") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ... + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ... + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ... + "'") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ... + "'") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ... + "'") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ... + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | stringConcatenatedWith | -endpoint- name + ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | stringConcatenatedWith | 'cat '' -endpoint- ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | stringConcatenatedWith | 'cat '' + name -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ... + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ... + "'") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ... + "'") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ... + "'") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ... + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ... + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ... + "'") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ... + "'") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ... + "'") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ... + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | stringConcatenatedWith | -endpoint- name + ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ... + name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ... + name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | stringConcatenatedWith | 'cat '/foo/bar' -endpoint- ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | stringConcatenatedWith | 'cat '/foo/bar' + name -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ... file") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ... file") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ... file") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ... file") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ... file") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ... file") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ... file") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ... file") | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ... file") | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ... file") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | stringConcatenatedWith | -endpoint- ' some file' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | enclosingFunctionBody | name cp exec rm -rf name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name some file | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | enclosingFunctionName | stringConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | stringConcatenatedWith | name -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:21 | module. ... .arrays | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:21 | module. ... .arrays | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:21 | module. ... .arrays | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:94:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:94:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:94:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:8:82:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:8:82:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:8:82:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:16:82:21 | arrays | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:16:82:21 | arrays | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:16:82:21 | arrays | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | assignedToPropName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | CalleeFlexibleAccessPath | args1.push | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | receiverName | args1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | CalleeFlexibleAccessPath | args1.join | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | receiverName | args1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | CalleeFlexibleAccessPath | ?.join | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | stringConcatenatedWith | -endpoint- name + '"' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | stringConcatenatedWith | '"' -endpoint- '"' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | stringConcatenatedWith | '"' + name -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | CalleeFlexibleAccessPath | ?.join | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ... name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ... name]) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ... name]) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ... name]) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ... name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ... name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ... name]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ... name]) | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ... name]) | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ... name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionBody | name cp exec rm -rf name args1 node args1 push name cp exec args1 join cp exec rm -rf name join cp exec rm -rf " name " join cp execFile rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionName | arrays | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util = ... "util") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util = ... "util") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util = ... "util") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:18 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:18 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | exceptional return of require("util") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | exceptional return of require("util") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | exceptional return of require("util") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | require("util") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | require("util") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | require("util") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:21 | module. ... .format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:21 | module. ... .format | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:21 | module. ... .format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:109:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:109:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:109:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:8:97:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:8:97:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:8:97:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:16:97:21 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:16:97:21 | format | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:16:97:21 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | assignedToPropName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ... name)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ... name)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ... name)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ... name)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ... name)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ... name)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ... name)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ... name)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ... name)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ... name)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | CalleeFlexibleAccessPath | util.format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | receiverName | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ... name)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ... name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ... name)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ... name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ... name)) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ... name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | calleeImports | printf | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | CalleeFlexibleAccessPath | import(!) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | calleeImports | printf | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | enclosingFunctionName | format | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:20 | module.exports.valid | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:20 | module.exports.valid | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:20 | module.exports.valid | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:118:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:118:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:118:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:8:111:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:8:111:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:8:111:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:16:111:20 | valid | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:16:111:20 | valid | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:16:111:20 | valid | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | assignedToPropName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | enclosingFunctionBody | name cp exec rm -rf name isValidName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | enclosingFunctionName | valid | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:19 | module.exports.safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:19 | module.exports.safe | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:19 | module.exports.safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:127:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:127:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:127:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:8:120:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:8:120:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:8:120:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:16:120:19 | safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:16:120:19 | safe | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:16:120:19 | safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | assignedToPropName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | enclosingFunctionBody | name cp exec rm -rf name isSafeName name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | enclosingFunctionName | safe | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | class C ... ed\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | class C ... ed\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | class C ... ed\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:7:129:10 | Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:7:129:10 | Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:7:129:10 | Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:130:4 | wha | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:130:4 | wha | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:130:4 | wha | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name) ... T OK\\n\\t} | assignedToPropName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name) ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name) ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name) ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | enclosingFunctionName | wha | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static ... rted\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static ... rted\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:9:134:11 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:9:134:11 | bla | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:9:134:11 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name) ... rted\\n\\t} | assignedToPropName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name) ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name) ... rted\\n\\t} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name) ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | enclosingFunctionName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:137:12 | constructor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:137:12 | constructor | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:137:12 | constructor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name) ... rted\\n\\t} | assignedToPropName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name) ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name) ... rted\\n\\t} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name) ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:19 | module.exports.cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:19 | module.exports.cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:19 | module.exports.cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:32 | module. ... Cla4() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:32 | module. ... Cla4() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:32 | module. ... Cla4() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:8:141:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:8:141:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:8:141:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:16:141:19 | cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:16:141:19 | cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:16:141:19 | cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | exceptional return of new Cla4() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | exceptional return of new Cla4() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | exceptional return of new Cla4() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | assignedToPropName | cla4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:27:141:30 | Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:27:141:30 | Cla4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:27:141:30 | Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | functio ... orted\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | functio ... orted\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | functio ... orted\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | enclosingFunctionName | Cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:19 | module.exports.cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:19 | module.exports.cla5 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:19 | module.exports.cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:32 | module. ... Cla5() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:32 | module. ... Cla5() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:32 | module. ... Cla5() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:8:146:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:8:146:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:8:146:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:16:146:19 | cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:16:146:19 | cla5 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:16:146:19 | cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | exceptional return of new Cla5() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | exceptional return of new Cla5() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | exceptional return of new Cla5() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | assignedToPropName | cla5 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:27:146:30 | Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:27:146:30 | Cla5 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:27:146:30 | Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:23 | module. ... ndirect | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:23 | module. ... ndirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:23 | module. ... ndirect | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:153:1 | module. ... cb);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:153:1 | module. ... cb);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:153:1 | module. ... cb);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:8:148:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:8:148:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:8:148:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:16:148:23 | indirect | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:16:148:23 | indirect | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:16:148:23 | indirect | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ... cb);\\n} | assignedToPropName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ... cb);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ... cb);\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ... cb);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ... + name | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ... + name | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | enclosingFunctionBody | name cmd rm -rf name sh sh args -c cmd cp spawn sh args cb | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | enclosingFunctionName | indirect | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:24 | module. ... direct2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:24 | module. ... direct2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:24 | module. ... direct2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:168:1 | module. ... }\\n\\t);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:168:1 | module. ... }\\n\\t);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:168:1 | module. ... }\\n\\t);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:8:155:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:8:155:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:8:155:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:16:155:24 | indirect2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:16:155:24 | indirect2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:16:155:24 | indirect2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | assignedToPropName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 = ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 = ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 = ... + name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 = ... + name | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 = ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C', ... .concat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C', ... .concat | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C', ... .concat | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C', ... .concat | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C', ... .concat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C', ... (args2) | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C', ... (args2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C', ... (args2) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C', ... (args2) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C', ... (args2) | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C', ... (args2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | CalleeFlexibleAccessPath | ?.concat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | InputAccessPathFromCallee | 2.stdio | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | assignedToPropName | stdio | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | enclosingFunctionName | indirect2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:18 | module.exports.cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:18 | module.exports.cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:18 | module.exports.cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:175:1 | module. ... T OK\\n\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:175:1 | module. ... T OK\\n\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:175:1 | module. ... T OK\\n\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:8:170:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:8:170:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:8:170:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:16:170:18 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:16:170:18 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:16:170:18 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | assignedToPropName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | stringConcatenatedWith | -endpoint- command | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | stringConcatenatedWith | 'fo \| ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | contextSurroundingFunctionParameters | (command, name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | enclosingFunctionBody | command name cp exec fo \| command cp exec fo \| name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | enclosingFunctionName | cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | stringConcatenatedWith | 'fo \| ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:24 | module. ... nitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:24 | module. ... nitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:24 | module. ... nitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:183:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:183:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:183:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:8:177:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:8:177:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:8:177:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:16:177:24 | sanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:16:177:24 | sanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:16:177:24 | sanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | assignedToPropName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | stringConcatenatedWith | -endpoint- name.replace() + ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | stringConcatenatedWith | ''' -endpoint- ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | CalleeFlexibleAccessPath | name.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | receiverName | name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | CalleeFlexibleAccessPath | name.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | receiverName | name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | stringConcatenatedWith | ''' + name.replace() -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | stringConcatenatedWith | -endpoint- sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken ... ) + "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken ... ) + "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | stringConcatenatedWith | -endpoint- name.replace() + ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | stringConcatenatedWith | ''' -endpoint- ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | CalleeFlexibleAccessPath | name.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | receiverName | name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | CalleeFlexibleAccessPath | name.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | receiverName | name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | stringConcatenatedWith | ''' + name.replace() -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | stringConcatenatedWith | -endpoint- broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf sanitized broken ' name replace /'/g ''' ' cp exec rm -rf broken | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | enclosingFunctionName | sanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path = ... "path") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path = ... "path") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path = ... "path") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:18 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:18 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | exceptional return of require("path") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | exceptional return of require("path") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | exceptional return of require("path") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | require("path") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | require("path") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | require("path") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:20 | module.exports.guard | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:20 | module.exports.guard | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:20 | module.exports.guard | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:194:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:194:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:194:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:8:186:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:8:186:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:8:186:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:16:186:20 | guard | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:16:186:20 | guard | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:16:186:20 | guard | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | assignedToPropName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | CalleeFlexibleAccessPath | path.exist | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | enclosingFunctionBody | name cp exec rm -rf name path exist name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | enclosingFunctionName | guard | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:31 | module. ... OfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:31 | module. ... OfChars | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:31 | module. ... OfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:204:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:204:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:204:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:8:196:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:8:196:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:8:196:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:16:196:31 | blacklistOfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:16:196:31 | blacklistOfChars | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:16:196:31 | blacklistOfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | CalleeFlexibleAccessPath | ?.test | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | enclosingFunctionBody | name cp exec rm -rf name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | enclosingFunctionName | blacklistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:31 | module. ... OfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:31 | module. ... OfChars | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:31 | module. ... OfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:214:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:214:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:214:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:8:206:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:8:206:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:8:206:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:16:206:31 | whitelistOfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:16:206:31 | whitelistOfChars | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:16:206:31 | whitelistOfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | CalleeFlexibleAccessPath | ?.test | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | enclosingFunctionBody | name cp exec rm -rf name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | enclosingFunctionName | whitelistOfChars | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:25 | module. ... ckList2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:25 | module. ... ckList2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:25 | module. ... ckList2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:225:1 | module. ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:225:1 | module. ... ENCY]\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:225:1 | module. ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:8:216:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:8:216:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:8:216:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:16:216:25 | blackList2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:16:216:25 | blackList2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:16:216:25 | blackList2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | assignedToPropName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | CalleeFlexibleAccessPath | ?.test | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | CalleeFlexibleAccessPath | process.exit | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | calleeImports | process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | receiverName | process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | enclosingFunctionBody | name cp exec rm -rf name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf name process exit 1 cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | enclosingFunctionName | blackList2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:25 | module. ... essSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:25 | module. ... essSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:25 | module. ... essSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:237:1 | module. ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:237:1 | module. ... ENCY]\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:237:1 | module. ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:8:227:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:8:227:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:8:227:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:16:227:25 | accessSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:16:227:25 | accessSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:16:227:25 | accessSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | assignedToPropName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | CalleeFlexibleAccessPath | path.accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | enclosingFunctionBody | name cp exec rm -rf name path accessSync name e cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | enclosingFunctionName | accessSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanIn ... rn s;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanIn ... rn s;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanIn ... rn s;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | functio ... rn s;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | functio ... rn s;\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | functio ... rn s;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | CalleeFlexibleAccessPath | ?.test | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | stringConcatenatedWith | -endpoint- s.replace() + ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | stringConcatenatedWith | ''' -endpoint- ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | CalleeFlexibleAccessPath | s.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | receiverName | s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | CalleeFlexibleAccessPath | s.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | receiverName | s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | stringConcatenatedWith | ''' + s.replace() -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ... "\\\\'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ... "\\\\'") | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ... "\\\\'") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ... "\\\\'") | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ... "\\\\'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ... "\\\\'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ... "\\\\'") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ... "\\\\'") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ... "\\\\'") | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ... "\\\\'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ... "\\\\'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ... "\\\\'") | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ... "\\\\'") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ... "\\\\'") | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ... "\\\\'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | CalleeFlexibleAccessPath | s.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | receiverName | s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | CalleeFlexibleAccessPath | s.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | receiverName | s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | CalleeFlexibleAccessPath | s.replace().replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | CalleeFlexibleAccessPath | s.replace().replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g replace /\\\\'''/g \\' s | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionName | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:28 | module. ... nitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:28 | module. ... nitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:28 | module. ... nitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:254:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:254:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:254:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:8:248:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:8:248:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:8:248:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:16:248:28 | goodSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:16:248:28 | goodSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:16:248:28 | goodSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | assignedToPropName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | CalleeFlexibleAccessPath | cleanInput | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | stringConcatenatedWith | -endpoint- cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | enclosingFunctionBody | name cp exec rm -rf name cleaned cleanInput name cp exec rm -rf cleaned | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | enclosingFunctionName | goodSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs = require("fs") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs = require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs = require("fs") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:16 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:16 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | exceptional return of require("fs") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | exceptional return of require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | exceptional return of require("fs") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | require("fs") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | require("fs") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:21 | module. ... .guard2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:21 | module. ... .guard2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:21 | module. ... .guard2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:265:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:265:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:265:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:8:257:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:8:257:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:8:257:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:16:257:21 | guard2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:16:257:21 | guard2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:16:257:21 | guard2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | assignedToPropName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | CalleeFlexibleAccessPath | fs.existsSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | calleeImports | fs | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | receiverName | fs | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | stringConcatenatedWith | 'prefix/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ... + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | stringConcatenatedWith | 'rm -rf prefix/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ... + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | enclosingFunctionBody | name cp exec rm -rf name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | enclosingFunctionName | guard2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | stringConcatenatedWith | 'rm -rf prefix/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:32 | module. ... roperty | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:32 | module. ... roperty | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:32 | module. ... roperty | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:273:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:273:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:273:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:8:267:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:8:267:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:8:267:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:16:267:32 | sanitizerProperty | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:16:267:32 | sanitizerProperty | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:16:267:32 | sanitizerProperty | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | assignedToPropName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | stringConcatenatedWith | -endpoint- obj.version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | assignedToPropName | version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | stringConcatenatedWith | -endpoint- obj.version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | contextSurroundingFunctionParameters | (obj) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | enclosingFunctionBody | obj cp exec rm -rf obj version obj version cp exec rm -rf obj version | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | enclosingFunctionName | sanitizerProperty | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:18 | module.exports.Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:18 | module.exports.Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:18 | module.exports.Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:283:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:283:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:283:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:8:275:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:8:275:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:8:275:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:16:275:18 | Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:16:275:18 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:16:275:18 | Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | assignedToPropName | Foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:28:275:30 | Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:28:275:30 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:28:275:30 | Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | assignedToPropName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | enclosingFunctionName | constructor | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:276:6 | start | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:276:6 | start | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:276:6 | start | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts) ... T OK\\n\\t} | assignedToPropName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts) ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts) ... T OK\\n\\t} | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts) ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | stringConcatenatedWith | -endpoint- opts.bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | assignedToPropName | opts | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | assignedToPropName | bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | stringConcatenatedWith | -endpoint- this.opts.bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | contextSurroundingFunctionParameters | (opts) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | enclosingFunctionBody | opts cp exec rm -rf opts bla opts opts bla opts bla cp exec rm -rf opts bla | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | enclosingFunctionName | start | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | enclosingFunctionBody | str result str result result replace />/g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g | CalleeFlexibleAccessPath | result.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | enclosingFunctionBody | str result str result result replace />/g result result replace //g | enclosingFunctionName | sanitizeShellString | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | receiverName | result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | CalleeFlexibleAccessPath | result.replace | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | enclosingFunctionBody | str result str result result replace />/g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace //g result result replace / s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:373:0 | this | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:373:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | functio ... sult;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | functio ... sult;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | functio ... sult;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i] ... == '"') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i] ... == '"') | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i] ... == '"') | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i] ... == '"') | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i] ... == '"') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result ... + s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result ... + s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result ... + s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result ... + s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result ... + s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | stringConcatenatedWith | -endpoint- s.? | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | stringConcatenatedWith | '' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | contextSurroundingFunctionParameters | (str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | enclosingFunctionBody | str s str result i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | enclosingFunctionName | yetAnohterSanitizer | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:25 | module. ... itizer3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:25 | module. ... itizer3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:25 | module. ... itizer3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:410:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:410:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:410:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:8:405:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:8:405:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:8:405:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:16:405:25 | sanitizer3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:16:405:25 | sanitizer3 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:16:405:25 | sanitizer3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | assignedToPropName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | stringConcatenatedWith | -endpoint- sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | enclosingFunctionBody | name cp exec rm -rf name sanitized yetAnohterSanitizer name cp exec rm -rf sanitized | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | enclosingFunctionName | sanitizer3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:8 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:8 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp = re ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp = re ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:18 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:18 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | exceptional return of require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn = cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn = cp.spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn = cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:16 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:16 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:16 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:22 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:22 | cp.spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:22 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:18:413:22 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:18:413:22 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:18:413:22 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:26 | module. ... lOption | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:26 | module. ... lOption | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:26 | module. ... lOption | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:429:1 | module. ... ild`.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:429:1 | module. ... ild`.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:429:1 | module. ... ild`.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:8:414:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:8:414:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:8:414:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:16:414:26 | shellOption | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:16:414:26 | shellOption | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:16:414:26 | shellOption | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | assignedToPropName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ... => {}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ... => {}) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ... => {}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ... => {}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ... => {}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ... => {}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ... => {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ... => {}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ... => {}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ... => {}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | InputAccessPathFromCallee | 2.shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | assignedToPropName | shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | CalleeFlexibleAccessPath | cp.execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | InputArgumentIndex | 3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | contextSurroundingFunctionParameters | (name)\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | contextSurroundingFunctionParameters | (name)\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | contextSurroundingFunctionParameters | (name)\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ... true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ... true}) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ... true}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ... true}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ... true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ... true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ... true}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ... true}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ... true}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ... true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | InputAccessPathFromCallee | 2.shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | assignedToPropName | shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ... true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ... true}) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ... true}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ... true}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ... true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ... true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ... true}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ... true}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ... true}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ... true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | CalleeFlexibleAccessPath | cp.execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | InputAccessPathFromCallee | 2.shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | assignedToPropName | shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ... true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ... true}) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ... true}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ... true}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ... true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ... true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ... true}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ... true}) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ... true}) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ... true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | CalleeFlexibleAccessPath | cp.spawnSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | CalleeFlexibleAccessPath | cp.spawnSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | CalleeFlexibleAccessPath | cp.spawnSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | CalleeFlexibleAccessPath | cp.spawnSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | InputAccessPathFromCallee | 2.shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | assignedToPropName | shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | assignedToPropName | shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | CalleeFlexibleAccessPath | arr.push | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | receiverName | arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ... + '-') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ... + '-') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ... + '-') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ... + '-') | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ... + '-') | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ... + '-') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | CalleeFlexibleAccessPath | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | stringConcatenatedWith | -endpoint- '-' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | CalleeFlexibleAccessPath | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ? ... :' : '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ? ... :' : '' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ? ... :' : '' | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ? ... :' : '' | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ? ... :' : '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | stringConcatenatedWith | -endpoint- ':' | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | stringConcatenatedWith | name -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | stringConcatenatedWith | '' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name : - SPAWN_OPT | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | enclosingFunctionName | shellOption | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | functio ... arr;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | functio ... arr;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | functio ... arr;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | CalleeFlexibleAccessPath | arr.push | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | receiverName | arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | CalleeFlexibleAccessPath | arr.push | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | receiverName | arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | CalleeFlexibleAccessPath | arr.push | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | receiverName | arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | contextSurroundingFunctionParameters | (first, last) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | enclosingFunctionName | build | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncEx ... ecute") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncEx ... ecute") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncEx ... ecute") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:23 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:23 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | exceptional return of require ... ecute") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | exceptional return of require ... ecute") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | exceptional return of require ... ecute") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | require ... ecute") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | require ... ecute") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | require ... ecute") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:25 | module. ... ncStuff | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:25 | module. ... ncStuff | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:25 | module. ... ncStuff | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:443:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:443:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:443:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:8:441:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:8:441:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:8:441:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:16:441:25 | asyncStuff | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:16:441:25 | asyncStuff | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:16:441:25 | asyncStuff | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | assignedToPropName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | CalleeFlexibleAccessPath | asyncExec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | calleeImports | async-execute | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | enclosingFunctionName | asyncStuff | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:445:13 | myFuncs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:445:13 | myFuncs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:445:13 | myFuncs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:17:449:1 | {\\n\\tmyFu ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:17:449:1 | {\\n\\tmyFu ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:17:449:1 | {\\n\\tmyFu ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:446:7 | myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:446:7 | myFunc | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:446:7 | myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | assignedToPropName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | CalleeFlexibleAccessPath | asyncExec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | calleeImports | async-execute | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | enclosingFunctionBody | name asyncExec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | enclosingFunctionName | myFunc | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:22 | module. ... blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:22 | module. ... blabity | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:22 | module. ... blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:27 | module. ... ty = {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:27 | module. ... ty = {} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:27 | module. ... ty = {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:8:451:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:8:451:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:8:451:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:16:451:22 | blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:16:451:22 | blabity | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:16:451:22 | blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | assignedToPropName | blabity | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:6 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:6 | Object | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:6 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:23 | Object. ... perties | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:23 | Object. ... perties | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:23 | Object. ... perties | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | Object. ... \\t)\\n\\t)\\n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | Object. ... \\t)\\n\\t)\\n) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | Object. ... \\t)\\n\\t)\\n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | exceptional return of Object. ... \\t)\\n\\t)\\n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | exceptional return of Object. ... \\t)\\n\\t)\\n) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | exceptional return of Object. ... \\t)\\n\\t)\\n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:8:453:23 | defineProperties | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:8:453:23 | defineProperties | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:8:453:23 | defineProperties | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:7 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:7 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:7 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:15 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:15 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:15 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | CalleeFlexibleAccessPath | Object.defineProperties | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | receiverName | Object | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:9:454:15 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:9:454:15 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:9:454:15 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:17:454:23 | blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:17:454:23 | blabity | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:17:454:23 | blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:7 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:7 | Object | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:7 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:14 | Object.assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:14 | Object.assign | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:14 | Object.assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | CalleeFlexibleAccessPath | Object.defineProperties | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | receiverName | Object | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | exceptional return of Object. ... \\n\\t\\t)\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | exceptional return of Object. ... \\n\\t\\t)\\n\\t) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | exceptional return of Object. ... \\n\\t\\t)\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:9:455:14 | assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:9:455:14 | assign | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:9:455:14 | assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | CalleeFlexibleAccessPath | Object.assign | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | receiverName | Object | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:8 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:8 | Object | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:8 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:16 | Object.entries | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:16 | Object.entries | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:16 | Object.entries | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | Object. ... yFuncs) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | Object. ... yFuncs) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | Object. ... yFuncs) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | exceptional return of Object. ... yFuncs) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | exceptional return of Object. ... yFuncs) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | exceptional return of Object. ... yFuncs) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:32 | Object. ... .reduce | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:32 | Object. ... .reduce | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:32 | Object. ... .reduce | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | CalleeFlexibleAccessPath | Object.assign | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | receiverName | Object | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | exceptional return of Object. ... \\t{}\\n\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | exceptional return of Object. ... \\t{}\\n\\t\\t) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | exceptional return of Object. ... \\t{}\\n\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:10:457:16 | entries | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:10:457:16 | entries | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:10:457:16 | entries | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | CalleeFlexibleAccessPath | Object.entries | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | receiverName | Object | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:27:457:32 | reduce | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:27:457:32 | reduce | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:27:457:32 | reduce | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | CalleeFlexibleAccessPath | Object.entries().reduce | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | CalleeFlexibleAccessPath | Object.assign | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | receiverName | Object | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | CalleeFlexibleAccessPath | Object.assign | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | receiverName | Object | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]: ... \\n\\t\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | CalleeFlexibleAccessPath | Object.assign | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | InputAccessPathFromCallee | 1.? | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | CalleeFlexibleAccessPath | Object.assign | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | InputAccessPathFromCallee | 1.?.value | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | assignedToPropName | value | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | CalleeFlexibleAccessPath | Object.assign | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | InputAccessPathFromCallee | 1.?.configurable | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | assignedToPropName | configurable | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | contextSurroundingFunctionParameters | (props, ?) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | enclosingFunctionBody | props key value Object assign props key value configurable true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | enclosingFunctionName | reduce#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | CalleeFlexibleAccessPath | Object.entries().reduce | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:10 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:10 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:10 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path = ... 'path') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path = ... 'path') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path = ... 'path') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:20 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:20 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:20 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | exceptional return of require('path') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | exceptional return of require('path') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | exceptional return of require('path') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | require('path') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | require('path') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | require('path') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:17 | {promisify} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:17 | {promisify} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:17 | {promisify} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | {promis ... 'util') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | {promis ... 'util') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | {promis ... 'util') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:27 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:27 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | exceptional return of require('util') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | exceptional return of require('util') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | exceptional return of require('util') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | require('util') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | require('util') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | require('util') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec = ... ).exec) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec = ... ).exec) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec = ... ).exec) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:22 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:22 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:22 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | exceptional return of promisi ... ).exec) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | exceptional return of promisi ... ).exec) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | exceptional return of promisi ... ).exec) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | promisi ... ).exec) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | promisi ... ).exec) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | promisi ... ).exec) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:30 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:30 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:30 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | exceptional return of require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | exceptional return of require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | CalleeFlexibleAccessPath | promisify | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:49:475:52 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:49:475:52 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:49:475:52 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:480:1 | module. ... cmd);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:480:1 | module. ... cmd);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:480:1 | module. ... cmd);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:8:477:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:8:477:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:8:477:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | CalleeFlexibleAccessPath | path.join | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | calleeImports | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | receiverName | path | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | calleeImports | util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | contextSurroundingFunctionParameters | (config) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | enclosingFunctionName | check | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:26 | module. ... tConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:26 | module. ... tConcat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:26 | module. ... tConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:486:1 | module. ... rgs);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:486:1 | module. ... rgs);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:486:1 | module. ... rgs);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:8:482:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:8:482:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:8:482:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:16:482:26 | splitConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:16:482:26 | splitConcat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:16:482:26 | splitConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | assignedToPropName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args = ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args = ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args = ... + name | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args = ... + name | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args = ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ... + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ... + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ... + name | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ... + name | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ... + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | stringConcatenatedWith | ' my name is ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | stringConcatenatedWith | -endpoint- args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | enclosingFunctionBody | name args my name is name cmd echo cp exec cmd args | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | enclosingFunctionName | splitConcat | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | stringConcatenatedWith | 'echo' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:24 | module. ... Command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:24 | module. ... Command | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:24 | module. ... Command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:501:2 | module. ... K\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:501:2 | module. ... K\\n\\t}\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:501:2 | module. ... K\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:8:488:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:8:488:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:8:488:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:16:488:24 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:16:488:24 | myCommand | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:16:488:24 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | functio ... cmd);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | functio ... cmd);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | exceptional return of functio ... K\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | exceptional return of functio ... K\\n\\t}\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | exceptional return of functio ... K\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | assignedToPropName | myCommand | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd | stringConcatenatedWith | -endpoint- cwd + ' ; ' + myCommand | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | stringConcatenatedWith | 'cd ' -endpoint- ' ; ' + myCommand | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 | ; | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 | ; | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 | ; | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 | ; | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 | ; | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 | ; | stringConcatenatedWith | 'cd ' + cwd -endpoint- myCommand | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | stringConcatenatedWith | 'cd ' + cwd + ' ; ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | contextSurroundingFunctionParameters | (myCommand) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | enclosingFunctionBody | myCommand cmd cd cwd ; myCommand cp exec cmd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | assignedToPropName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | assignedToPropName | myIndirectThing | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | CalleeFlexibleAccessPath | MyThing.cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | contextSurroundingFunctionParameters | ()\n(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:7 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:7 | imp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:7 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp = r ... orted') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp = r ... orted') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp = r ... orted') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:17 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:17 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | exceptional return of require ... orted') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | exceptional return of require ... orted') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | exceptional return of require ... orted') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | require ... orted') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | require ... orted') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | require ... orted') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:18:505:20 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:18:505:20 | imp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:18:505:20 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:8 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:8 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:8 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:16 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:16 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:16 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:22 | module.exports[name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:22 | module.exports[name] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:22 | module.exports[name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:34 | module. ... p[name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:34 | module. ... p[name] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:34 | module. ... p[name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:10:506:16 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:10:506:16 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:10:506:16 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:18:506:21 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:18:506:21 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:18:506:21 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:28 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:28 | imp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:28 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:34 | imp[name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:34 | imp[name] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:34 | imp[name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:30:506:33 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:30:506:33 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:30:506:33 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:25 | module. ... itizer4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:25 | module. ... itizer4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:25 | module. ... itizer4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:547:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:547:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:547:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:8:509:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:8:509:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:8:509:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:16:509:25 | sanitizer4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:16:509:25 | sanitizer4 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:16:509:25 | sanitizer4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | CalleeFlexibleAccessPath | parseInt | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | CalleeFlexibleAccessPath | parseInt | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | CalleeFlexibleAccessPath | parseInt | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | enclosingFunctionBody | name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name cp exec rm -rf name cp exec rm -rf name isNaN name cp exec rm -rf name cp exec rm -rf name isNaN parseInt name 10 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name isNaN name 0 cp exec rm -rf name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | enclosingFunctionName | sanitizer4 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:16 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:16 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:5:1 | module. ... ule. \\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:5:1 | module. ... ule. \\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:5:1 | module. ... ule. \\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:8:3:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:16 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:16 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | functio ... file.\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | functio ... file.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | functio ... file.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:16 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:16 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:5:1 | module. ... file.\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:5:1 | module. ... file.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:5:1 | module. ... file.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:8:3:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:0 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:16 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:16 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:6 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:5:1 | module. ... gged.\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:5:1 | module. ... gged.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:5:1 | module. ... gged.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:8:3:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:0 | this | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:0 | this | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | dispatch | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | dispatch | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | dispatch | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | module | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | module | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | require | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | require | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatc ... ub"),\\n} | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatc ... ub"),\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatc ... ub"),\\n} | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatch | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatch | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatch | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:18:4:1 | {\\n GET ... ub"),\\n} | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:18:4:1 | {\\n GET ... ub"),\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:18:4:1 | {\\n GET ... ub"),\\n} | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:5 | GET | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:5 | GET | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:5 | GET | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:14 | require | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:14 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:14 | require | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | exceptional return of require("./bla") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | exceptional return of require("./bla") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | exceptional return of require("./bla") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | assignedToPropName | GET | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:6 | POST | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:6 | POST | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:6 | POST | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:15 | require | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:15 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:15 | require | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | exceptional return of require("./subsub") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | exceptional return of require("./subsub") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | exceptional return of require("./subsub") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | assignedToPropName | POST | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:6 | module | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:6 | module | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:14 | module.exports | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:14 | module.exports | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:18 | module.exports.foo | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:18 | module.exports.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:18 | module.exports.foo | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:8:1 | module. ... ame);\\n} | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:8:1 | module. ... ame);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:8:1 | module. ... ame);\\n} | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:8:6:14 | exports | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:8:6:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:8:6:14 | exports | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:16:6:18 | foo | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:16:6:18 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:16:6:18 | foo | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | assignedToPropName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | CalleeFlexibleAccessPath | dispatch.? | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | contextFunctionInterfaces | foo(name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | contextSurroundingFunctionParameters | (name, type) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | enclosingFunctionBody | name type dispatch type name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | fileImports | ./bla ./subsub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | receiverName | dispatch | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:18 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:18 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:5:1 | module. ... gged.\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:5:1 | module. ... gged.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:5:1 | module. ... gged.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:8:3:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:1:1:1:0 | this | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:2:6 | define | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:2:6 | define | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:2:6 | define | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | define( ... };\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | define( ... };\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | define( ... };\\n}) | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | exceptional return of define( ... };\\n}) | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | exceptional return of define( ... };\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | exceptional return of define( ... };\\n}) | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n };\\n} | CalleeFlexibleAccessPath | define | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n };\\n} | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n };\\n} | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n };\\n} | contextSurroundingFunctionParameters | (require) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n };\\n} | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextSurroundingFunctionParameters | (require) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n a ... "),\\n } | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n a ... "),\\n } | contextSurroundingFunctionParameters | (require) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n a ... "),\\n } | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n a ... "),\\n } | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n a ... "),\\n } | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | contextSurroundingFunctionParameters | (require) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | contextSurroundingFunctionParameters | (require) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | assignedToPropName | amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | contextSurroundingFunctionParameters | (require) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | contextFunctionInterfaces | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | contextSurroundingFunctionParameters | (require) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | enclosingFunctionBody | require amdSub require ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | enclosingFunctionName | define#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | fileImports | ./amdSub | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:0 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp = re ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:18 | require | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:18 | require | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | exceptional return of require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | require ... ocess") | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | require ... ocess") | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:6 | module | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:14 | module.exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:5:1 | module. ... d.js`\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:5:1 | module. ... d.js`\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:5:1 | module. ... d.js`\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:8:3:14 | exports | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | fileImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:0 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:0 | this | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | module | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | require | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | require | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp = re ... ocess") | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:16 | require | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:16 | require | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | require ... ocess") | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:6 | module | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:14 | module.exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:5:1 | module. ... gged.\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:5:1 | module. ... gged.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:5:1 | module. ... gged.\\n} | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:8:3:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:8:3:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:8:3:14 | exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | assignedToPropName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | enclosingFunctionName | exports | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:6 | module | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:14 | module.exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:18 | module.exports.foo | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:18 | module.exports.foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:18 | module.exports.foo | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:9:1 | module. ... st.js\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:9:1 | module. ... st.js\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:9:1 | module. ... st.js\\n} | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:8:7:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:8:7:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:8:7:14 | exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:16:7:18 | foo | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:16:7:18 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:16:7:18 | foo | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | assignedToPropName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | stringConcatenatedWith | -endpoint- name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | contextSurroundingFunctionParameters | (name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | enclosingFunctionBody | name cp exec rm -rf name | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | enclosingFunctionName | foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:6 | module | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:14 | module.exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:18 | module.exports.amd | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:18 | module.exports.amd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:18 | module.exports.amd | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:40 | module. ... md.js") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:40 | module. ... md.js") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:40 | module. ... md.js") | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:8:11:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:8:11:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:8:11:14 | exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:16:11:18 | amd | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:16:11:18 | amd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:16:11:18 | amd | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:28 | require | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:28 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:28 | require | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | exceptional return of require("./amd.js") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | exceptional return of require("./amd.js") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | exceptional return of require("./amd.js") | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | assignedToPropName | amd | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:6 | module | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:14 | module.exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:25 | module. ... ToShell | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:25 | module. ... ToShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:25 | module. ... ToShell | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:15:1 | module. ... OT OK\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:15:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:15:1 | module. ... OT OK\\n} | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:8:13:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:8:13:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:8:13:14 | exports | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:16:13:25 | arrToShell | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:16:13:25 | arrToShell | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:16:13:25 | arrToShell | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | assignedToPropName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ... true}) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ... true}) | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ... true}) | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ... true}) | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ... true}) | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ... true}) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ... true}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ... true}) | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ... true}) | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ... true}) | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | receiverName | cp | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | CalleeFlexibleAccessPath | cp.spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | InputAccessPathFromCallee | 2.shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | assignedToPropName | shell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | contextSurroundingFunctionParameters | (cmd, arr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | enclosingFunctionBody | cmd arr cp spawn echo arr shell true | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | enclosingFunctionName | arrToShell | +| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | fileImports | ./amd.js child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:0 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:0 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | require | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | require | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:11 | express | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:11 | express | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express ... press') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:21 | require | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:21 | require | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | exceptional return of require('express') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | require('express') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | require('express') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:17 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:17 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:17 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_p ... ocess') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_p ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_p ... ocess') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:27 | require | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:27 | require | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | exceptional return of require ... ocess') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | exceptional return of require ... ocess') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | require ... ocess') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | require ... ocess') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | require ... ocess') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSyn ... xecSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSyn ... xecSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSyn ... xecSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:28 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:28 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:28 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:37 | child_p ... xecSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:37 | child_p ... xecSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:37 | child_p ... xecSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:30:3:37 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:30:3:37 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:30:3:37 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec = ... ss.exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec = ... ss.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec = ... ss.exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:24 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:24 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:24 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:29 | child_process.exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:29 | child_process.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:29 | child_process.exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:26:4:29 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:26:4:29 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:26:4:29 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn = ... s.spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn = ... s.spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn = ... s.spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:25 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:25 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:25 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:31 | child_process.spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:31 | child_process.spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:31 | child_process.spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:27:5:31 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:27:5:31 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:27:5:31 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:13 | spawnSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:13 | spawnSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:13 | spawnSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:39 | spawnSy ... awnSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:39 | spawnSy ... awnSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:39 | spawnSy ... awnSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:29 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:29 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:29 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:39 | child_p ... awnSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:39 | child_p ... awnSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:39 | child_p ... awnSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:31:6:39 | spawnSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:31:6:39 | spawnSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:31:6:39 | spawnSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:6 | fs | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:6 | fs | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:22 | fs = require('fs') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:22 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:22 | fs = require('fs') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:16 | require | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:16 | require | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | exceptional return of require('fs') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | exceptional return of require('fs') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | require('fs') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | require('fs') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:7 | app | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:7 | app | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:19 | app = express() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:19 | app = express() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:17 | express | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:17 | express | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | exceptional return of express() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | express() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | express() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:12:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:12:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:12:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exceptional return of exec("c ... ut);\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exceptional return of exec("c ... ut);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exceptional return of exec("c ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exec("c ... ut);\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exec("c ... ut);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exec("c ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | stringConcatenatedWith | -endpoint- id + '/status' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:22 | "cat /proc/" + id | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:22 | "cat /proc/" + id | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:22 | "cat /proc/" + id | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | stringConcatenatedWith | 'cat /proc/' -endpoint- '/status' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | stringConcatenatedWith | 'cat /proc/' + id -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | exceptional return of execSyn ... uinfo') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | exceptional return of execSyn ... uinfo') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | exceptional return of execSyn ... uinfo') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | execSyn ... uinfo') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | execSyn ... uinfo') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | execSyn ... uinfo') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:38 | execSyn ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:38 | execSyn ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:38 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:31:16:38 | toString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:31:16:38 | toString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:31:16:38 | toString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | exceptional return of execSyn ... path}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | exceptional return of execSyn ... path}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | exceptional return of execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | execSyn ... path}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | execSyn ... path}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat | stringConcatenatedWith | -endpoint- newpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | exceptional return of execSyn ... wc -l') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | exceptional return of execSyn ... wc -l') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | exceptional return of execSyn ... wc -l') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | execSyn ... wc -l') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | execSyn ... wc -l') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | execSyn ... wc -l') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ... wc -l' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ... wc -l' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ... wc -l' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ... wc -l' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ... wc -l' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ... wc -l' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | exceptional return of execSyn ... o/bar') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | exceptional return of execSyn ... o/bar') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | exceptional return of execSyn ... o/bar') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | execSyn ... o/bar') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | execSyn ... o/bar') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | execSyn ... o/bar') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:47 | execSyn ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:47 | execSyn ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:47 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:40:22:47 | toString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:40:22:47 | toString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:40:22:47 | toString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | exceptional return of execSyn ... o/bar`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | exceptional return of execSyn ... o/bar`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | exceptional return of execSyn ... o/bar`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | execSyn ... o/bar`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | execSyn ... o/bar`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | execSyn ... o/bar`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:44 | execSyn ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:44 | execSyn ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:44 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat | stringConcatenatedWith | -endpoint- newpath + ' /foo/bar' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' /foo/bar' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 | /foo/bar | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 | /foo/bar | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 | /foo/bar | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 | /foo/bar | stringConcatenatedWith | 'cat ' + newpath -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:37:24:44 | toString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:37:24:44 | toString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:37:24:44 | toString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exceptional return of exec(`c ... t) { }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exceptional return of exec(`c ... t) { }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exceptional return of exec(`c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exec(`c ... t) { }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exec(`c ... t) { }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exec(`c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat | stringConcatenatedWith | -endpoint- newpath + ' \| grep foo' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' \| grep foo' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 | \| grep foo | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 | \| grep foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 | \| grep foo | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 | \| grep foo | stringConcatenatedWith | 'cat ' + newpath -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | exceptional return of execSyn ... 1000}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | exceptional return of execSyn ... 1000}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | exceptional return of execSyn ... 1000}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | execSyn ... 1000}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | execSyn ... 1000}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | execSyn ... 1000}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat | stringConcatenatedWith | -endpoint- newpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:31 | uid | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:31 | uid | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:31 | uid | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | InputAccessPathFromCallee | 1.uid | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | assignedToPropName | uid | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exceptional return of exec('c ... t) { }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exceptional return of exec('c ... t) { }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exceptional return of exec('c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exec('c ... t) { }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exec('c ... t) { }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exec('c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:30 | cwd | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:30 | cwd | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:30 | cwd | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | InputAccessPathFromCallee | 1.cwd | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | assignedToPropName | cwd | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | exceptional return of execSyn ... path}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | exceptional return of execSyn ... path}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | exceptional return of execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | execSyn ... path}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | execSyn ... path}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | stringConcatenatedWith | -endpoint- newpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | stringConcatenatedWith | 'cat foo/bar/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | exceptional return of execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | exceptional return of execSyn ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | exceptional return of execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | execSyn ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | stringConcatenatedWith | -endpoint- newpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | stringConcatenatedWith | 'cat foo/bar/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:44 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:44 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:44 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | exceptional return of execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | exceptional return of execSyn ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | exceptional return of execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | execSyn ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid: ... 'utf8'} | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid: ... 'utf8'} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid: ... 'utf8'} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid: ... 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid: ... 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid: ... 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:40 | uid | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:40 | uid | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:40 | uid | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | InputAccessPathFromCallee | 1.uid | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | assignedToPropName | uid | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:51 | gid | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:51 | gid | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:51 | gid | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | InputAccessPathFromCallee | 1.gid | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | assignedToPropName | gid | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:67 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:67 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:67 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | exceptional return of execSyn ... r/baz') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | exceptional return of execSyn ... r/baz') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | exceptional return of execSyn ... r/baz') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | execSyn ... r/baz') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | execSyn ... r/baz') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | execSyn ... r/baz') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:52 | execSyn ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:52 | execSyn ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:52 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:45:38:52 | toString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:45:38:52 | toString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:45:38:52 | toString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | exceptional return of execSyn ... path}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | exceptional return of execSyn ... path}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | exceptional return of execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | execSyn ... path}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | execSyn ... path}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:49 | execSyn ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:49 | execSyn ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:49 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat | stringConcatenatedWith | -endpoint- newpath + ' > ' + destpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' > ' + destpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 | > | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 | > | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 | > | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 | > | stringConcatenatedWith | 'cat ' + newpath -endpoint- destpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | stringConcatenatedWith | 'cat ' + newpath + ' > ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:42:40:49 | toString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:42:40:49 | toString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:42:40:49 | toString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | exceptional return of execSyn ... File}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | exceptional return of execSyn ... File}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | exceptional return of execSyn ... File}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | execSyn ... File}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | execSyn ... File}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | execSyn ... File}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat | stringConcatenatedWith | -endpoint- files.join() + ' > ' + outFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:21 | files | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:21 | files | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:21 | files | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:26 | files.join | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:26 | files.join | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:26 | files.join | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | exceptional return of files.join(' ') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | exceptional return of files.join(' ') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | exceptional return of files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | stringConcatenatedWith | 'cat ' -endpoint- ' > ' + outFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:23:42:26 | join | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:23:42:26 | join | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:23:42:26 | join | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | CalleeFlexibleAccessPath | files.join | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | receiverName | files | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 | > | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 | > | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 | > | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 | > | stringConcatenatedWith | 'cat ' + files.join() -endpoint- outFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | stringConcatenatedWith | 'cat ' + files.join() + ' > ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | exceptional return of execSyn ... ' ')}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | exceptional return of execSyn ... ' ')}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | exceptional return of execSyn ... ' ')}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | execSyn ... ' ')}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | execSyn ... ' ')}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | execSyn ... ' ')}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat | stringConcatenatedWith | -endpoint- files.join() | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:21 | files | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:21 | files | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:21 | files | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:26 | files.join | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:26 | files.join | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:26 | files.join | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | exceptional return of files.join(' ') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | exceptional return of files.join(' ') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | exceptional return of files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | stringConcatenatedWith | 'cat ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:23:44:26 | join | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:23:44:26 | join | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:23:44:26 | join | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | CalleeFlexibleAccessPath | files.join | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | receiverName | files | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exceptional return of exec("c ... name") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exceptional return of exec("c ... name") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exceptional return of exec("c ... name") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exec("c ... name") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exec("c ... name") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exec("c ... name") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | exceptional return of execSyn ... tool}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | exceptional return of execSyn ... tool}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | exceptional return of execSyn ... tool}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | execSyn ... tool}`) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | execSyn ... tool}`) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | execSyn ... tool}`) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat | stringConcatenatedWith | -endpoint- newpath + ' \| ' + othertool | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' \| ' + othertool | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 | \| | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 | \| | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 | \| | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 | \| | stringConcatenatedWith | 'cat ' + newpath -endpoint- othertool | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | stringConcatenatedWith | 'cat ' + newpath + ' \| ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | functio ... OT OK\\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | functio ... OT OK\\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:10:50:12 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:10:50:12 | cat | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:10:50:12 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | stringConcatenatedWith | -endpoint- file | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | stringConcatenatedWith | 'cat ' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | contextSurroundingFunctionParameters | (file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | enclosingFunctionBody | file execSync cat file toString | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | enclosingFunctionName | cat | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | exceptional return of execSyn ... + "'") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | exceptional return of execSyn ... + "'") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | exceptional return of execSyn ... + "'") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | execSyn ... + "'") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | execSyn ... + "'") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | execSyn ... + "'") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | stringConcatenatedWith | -endpoint- newpath + ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:32 | "sh -c ... newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:32 | "sh -c ... newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:32 | "sh -c ... newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c ... h + "'" | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c ... h + "'" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c ... h + "'" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c ... h + "'" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c ... h + "'" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c ... h + "'" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | stringConcatenatedWith | 'sh -c 'cat ' -endpoint- ''' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | stringConcatenatedWith | 'sh -c 'cat ' + newpath -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:12 | execFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:12 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:12 | execFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFil ... xecFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFil ... xecFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFil ... xecFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:28 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:28 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:28 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:37 | child_p ... xecFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:37 | child_p ... xecFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:37 | child_p ... xecFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:30:56:37 | execFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:30:56:37 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:30:56:37 | execFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:16 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:16 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:16 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFil ... ileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFil ... ileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFil ... ileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:32 | child_process | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:32 | child_process | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:32 | child_process | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:45 | child_p ... ileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:45 | child_p ... ileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:45 | child_p ... ileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:34:57:45 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:34:57:45 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:34:57:45 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:59:8 | execFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:59:8 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:59:8 | execFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | exceptional return of execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | exceptional return of execFil ... ut);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | exceptional return of execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | execFil ... ut);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:64:8 | execFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:64:8 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:64:8 | execFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | exceptional return of execFil ... r); \\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | exceptional return of execFil ... r); \\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | exceptional return of execFil ... r); \\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | execFil ... r); \\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | execFil ... r); \\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | execFil ... r); \\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | enclosingFunctionBody | error stdout stderr console log stderr | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:69:8 | execFile | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:69:8 | execFile | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:69:8 | execFile | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | exceptional return of execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | exceptional return of execFil ... ut);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | exceptional return of execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | execFil ... ut);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:46 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:46 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:46 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | InputAccessPathFromCallee | 2.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | CalleeFlexibleAccessPath | execFile | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | InputArgumentIndex | 3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | enclosingFunctionBody | error stdout stderr console log stdout | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | enclosingFunctionName | execFile#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | exceptional return of execFil ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | exceptional return of execFil ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | exceptional return of execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | execFil ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | execFil ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:50 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:50 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:50 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | InputAccessPathFromCallee | 2.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | exceptional return of execFil ... xml' ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | exceptional return of execFil ... xml' ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | exceptional return of execFil ... xml' ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | execFil ... xml' ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | execFil ... xml' ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | execFil ... xml' ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:8 | opts | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:8 | opts | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:8 | opts | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts = ... 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts = ... 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts = ... 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:12:78:29 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:12:78:29 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:12:78:29 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:20 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:20 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:20 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | exceptional return of execFil ... opts) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | exceptional return of execFil ... opts) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | exceptional return of execFil ... opts) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | execFil ... opts) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | execFil ... opts) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | execFil ... opts) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:52 | anOptsF ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:52 | anOptsF ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:52 | anOptsF ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsF ... 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsF ... 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsF ... 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsFileNameThatIsTooLongToBePrintedByToString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsFileNameThatIsTooLongToBePrintedByToString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsFileNameThatIsTooLongToBePrintedByToString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:56:81:73 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:56:81:73 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:56:81:73 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:64 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:64 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:64 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | exceptional return of execFil ... String) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | exceptional return of execFil ... String) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | exceptional return of execFil ... String) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | execFil ... String) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | execFil ... String) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | execFil ... String) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | exceptional return of execFil ... ring'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | exceptional return of execFil ... ring'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | exceptional return of execFil ... ring'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | execFil ... ring'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | execFil ... ring'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | execFil ... ring'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:50 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:50 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:50 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | InputAccessPathFromCallee | 2.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | exceptional return of execFil ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | exceptional return of execFil ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | exceptional return of execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | execFil ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | execFil ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | stringConcatenatedWith | -endpoint- newPath + 'bar' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:43 | "foo/" + newPath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:43 | "foo/" + newPath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:43 | "foo/" + newPath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/" ... + "bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/" ... + "bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/" ... + "bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/" ... + "bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/" ... + "bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/" ... + "bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | stringConcatenatedWith | 'foo/' -endpoint- 'bar' | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | stringConcatenatedWith | 'foo/' + newPath -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:65 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:65 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:65 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | InputAccessPathFromCallee | 2.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:8 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:8 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | exceptional return of execSyn ... + foo) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | exceptional return of execSyn ... + foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | exceptional return of execSyn ... + foo) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | execSyn ... + foo) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | execSyn ... + foo) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | execSyn ... + foo) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:44 | execSyn ... oString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:44 | execSyn ... oString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:44 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | execSyn ... tring() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | execSyn ... tring() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | stringConcatenatedWith | -endpoint- foo | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | stringConcatenatedWith | 'cat /proc/cpuinfo' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:37:88:44 | toString | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:37:88:44 | toString | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:37:88:44 | toString | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | exceptional return of execFil ... th}` ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | exceptional return of execFil ... th}` ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | exceptional return of execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | execFil ... th}` ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | execFil ... th}` ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | stringConcatenatedWith | -endpoint- newpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | stringConcatenatedWith | 'foo/bar/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | exceptional return of execFil ... th}` ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | exceptional return of execFil ... th}` ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | exceptional return of execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | execFil ... th}` ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | execFil ... th}` ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | stringConcatenatedWith | -endpoint- newpath | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | stringConcatenatedWith | 'foo/bar/' -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exceptional return of exec("c ... h(out)) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exceptional return of exec("c ... h(out)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exceptional return of exec("c ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exec("c ... h(out)) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exec("c ... h(out)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exec("c ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | CalleeFlexibleAccessPath | doSomethingWith | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | exceptional return of execFil ... ptions) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | exceptional return of execFil ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | exceptional return of execFil ... ptions) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | execFil ... ptions) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | execFil ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | execFil ... ptions) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exceptional return of exec("n ... h(out)) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exceptional return of exec("n ... h(out)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exceptional return of exec("n ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exec("n ... h(out)) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exec("n ... h(out)) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exec("n ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | CalleeFlexibleAccessPath | doSomethingWith | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | enclosingFunctionBody | err out doSomethingWith out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:12 | execFileSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:12 | execFileSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | exceptional return of execFil ... cat` ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | exceptional return of execFil ... cat` ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | exceptional return of execFil ... cat` ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | execFil ... cat` ]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | execFil ... cat` ]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | execFil ... cat` ]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | CalleeFlexibleAccessPath | execFileSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | stringConcatenatedWith | -endpoint- | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | enclosingFunctionBody | err out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:5 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:5 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:5 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | exceptional return of spawn(' ... it'] }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | exceptional return of spawn(' ... it'] }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | exceptional return of spawn(' ... it'] }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | spawn(' ... it'] }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | spawn(' ... it'] }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | spawn(' ... it'] }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:20 | stdio | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:20 | stdio | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:20 | stdio | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio: ... herit'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio: ... herit'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio: ... herit'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio: ... herit'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio: ... herit'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio: ... herit'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | InputAccessPathFromCallee | 1.stdio | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | assignedToPropName | stdio | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:2 | (functi ... ());\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:2 | (functi ... ());\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:2 | (functi ... ());\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | (functi ... );\\n})() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | (functi ... );\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | (functi ... );\\n})() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | exceptional return of (functi ... );\\n})() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | exceptional return of (functi ... );\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | exceptional return of (functi ... );\\n})() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | functio ... d());\\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | functio ... d());\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | functio ... d());\\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n }) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n }) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n }) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n }) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | CalleeFlexibleAccessPath | cat.stdout.on | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | CalleeFlexibleAccessPath | cat.stdout.on | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data) ... a);\\n } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | CalleeFlexibleAccessPath | res.write | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | receiverName | res | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | CalleeFlexibleAccessPath | cat.stdout.on | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | CalleeFlexibleAccessPath | cat.stdout.on | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | contextSurroundingFunctionParameters | ()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | contextSurroundingFunctionParameters | ()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | contextSurroundingFunctionParameters | ()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | contextSurroundingFunctionParameters | ()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | contextSurroundingFunctionParameters | ()\n() | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:8 | dead | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:8 | dead | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:8 | dead | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:64 | dead = ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:64 | dead = ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:64 | dead = ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:15 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:15 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:15 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:11 | notDead | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:11 | notDead | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:11 | notDead | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:18 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:18 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:18 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:7 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:7 | console | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:7 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:11 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:11 | console.log | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:11 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | console.log(notDead) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | console.log(notDead) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | console.log(notDead) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | exceptional return of console.log(notDead) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | exceptional return of console.log(notDead) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | exceptional return of console.log(notDead) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:9:124:11 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:9:124:11 | log | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:9:124:11 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:2 | (functi ... ess.\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:2 | (functi ... ess.\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:2 | (functi ... ess.\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | (functi ... s.\\n})() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | (functi ... s.\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | (functi ... s.\\n})() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | exceptional return of (functi ... s.\\n})() | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | exceptional return of (functi ... s.\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | exceptional return of (functi ... s.\\n})() | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | functio ... cess.\\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | functio ... cess.\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | functio ... cess.\\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead = ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead = ... (out)}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead = ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead = ... (out)}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead = ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n ) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n ) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n ) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n ) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n ) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n ) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n ) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n ) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n ) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n ) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | CalleeFlexibleAccessPath | someCall | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | contextSurroundingFunctionParameters | () | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | contextSurroundingFunctionParameters | ()\n(err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | enclosingFunctionName | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:136:13 | stdout2 | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:136:13 | stdout2 | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:136:13 | stdout2 | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:138:2 | stdout2 ... tf8'\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:138:2 | stdout2 ... tf8'\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:138:2 | stdout2 ... tf8'\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:136:24 | execSync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:136:24 | execSync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:136:24 | execSync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | exceptional return of execSyn ... tf8'\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | exceptional return of execSyn ... tf8'\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | exceptional return of execSyn ... tf8'\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | execSyn ... tf8'\\n}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | execSyn ... tf8'\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | execSyn ... tf8'\\n}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:10 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:10 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:10 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | CalleeFlexibleAccessPath | execSync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:4 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:4 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exceptional return of exec('/ ... s) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exceptional return of exec('/ ... s) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exceptional return of exec('/ ... s) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exec('/ ... s) {}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exec('/ ... s) {}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exec('/ ... s) {}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | enclosingFunctionBody | e s | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | enclosingFunctionBody | e s | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | enclosingFunctionBody | e s | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | CalleeFlexibleAccessPath | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | contextSurroundingFunctionParameters | (e, s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | enclosingFunctionBody | e s | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | contextSurroundingFunctionParameters | (e, s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | enclosingFunctionBody | e s | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | contextSurroundingFunctionParameters | (e, s) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | enclosingFunctionBody | e s | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | enclosingFunctionName | exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:5 | spawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:5 | spawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:5 | spawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | exceptional return of spawn("cat") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | exceptional return of spawn("cat") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | exceptional return of spawn("cat") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | spawn("cat") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | spawn("cat") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | spawn("cat") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | CalleeFlexibleAccessPath | spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | calleeImports | child_process | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:11 | shelljs | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:11 | shelljs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:11 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs ... elljs") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs ... elljs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs ... elljs") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:21 | require | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:21 | require | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | exceptional return of require("shelljs") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | exceptional return of require("shelljs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | exceptional return of require("shelljs") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | require("shelljs") | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | require("shelljs") | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | require("shelljs") | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:7 | shelljs | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:7 | shelljs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:7 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:12 | shelljs.exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:12 | shelljs.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:12 | shelljs.exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | exceptional return of shelljs ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | exceptional return of shelljs ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | exceptional return of shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | shelljs ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | shelljs ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:9:146:12 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:9:146:12 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:9:146:12 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | receiverName | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | receiverName | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:7 | shelljs | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:7 | shelljs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:7 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:12 | shelljs.exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:12 | shelljs.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:12 | shelljs.exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | exceptional return of shelljs ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | exceptional return of shelljs ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | exceptional return of shelljs ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | shelljs ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | shelljs ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | shelljs ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:9:147:12 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:9:147:12 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:9:147:12 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | receiverName | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | receiverName | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:37 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:37 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:7 | shelljs | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:7 | shelljs | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:7 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:12 | shelljs.exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:12 | shelljs.exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:12 | shelljs.exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | exceptional return of shelljs ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | exceptional return of shelljs ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | exceptional return of shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | shelljs ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | shelljs ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:9:148:12 | exec | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:9:148:12 | exec | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:9:148:12 | exec | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | receiverName | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | receiverName | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:37 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:37 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | CalleeFlexibleAccessPath | shelljs.exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | calleeImports | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | receiverName | shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | enclosingFunctionName | shelljs.exec#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:10 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:10 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:10 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn ... spawn') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn ... spawn') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn ... spawn') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:20 | require | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:20 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:20 | require | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | exceptional return of require ... spawn') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | exceptional return of require ... spawn') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | exceptional return of require ... spawn') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | require ... spawn') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | require ... spawn') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | require ... spawn') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:6 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:6 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | cspawn( ... tf8' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | exceptional return of cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | exceptional return of cspawn( ... tf8' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | exceptional return of cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:37 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:37 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | InputAccessPathFromCallee | 2.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:6 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:6 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | cspawn( ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | exceptional return of cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | exceptional return of cspawn( ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | exceptional return of cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:37 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:37 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | InputAccessPathFromCallee | 2.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | InputArgumentIndex | 3 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:6 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:6 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | cspawn( ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | exceptional return of cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | exceptional return of cspawn( ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | exceptional return of cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:6 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:6 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | cspawn( ... /bar']) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | cspawn( ... /bar']) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | cspawn( ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | exceptional return of cspawn( ... /bar']) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | exceptional return of cspawn( ... /bar']) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | exceptional return of cspawn( ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:6 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:6 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | cspawn( ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | exceptional return of cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | exceptional return of cspawn( ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | exceptional return of cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | enclosingFunctionName | cspawn#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:6 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:6 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | cspawn( ... tf8' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | exceptional return of cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | exceptional return of cspawn( ... tf8' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | exceptional return of cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:24 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:24 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:24 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | CalleeFlexibleAccessPath | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:12 | myResult | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:12 | myResult | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:12 | myResult | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:46 | myResul ... /bar']) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:46 | myResul ... /bar']) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:46 | myResul ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:21 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:21 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:21 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:26 | cspawn.sync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:26 | cspawn.sync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:26 | cspawn.sync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | cspawn. ... /bar']) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | cspawn. ... /bar']) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | cspawn. ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | exceptional return of cspawn. ... /bar']) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | exceptional return of cspawn. ... /bar']) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | exceptional return of cspawn. ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:23:158:26 | sync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:23:158:26 | sync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:23:158:26 | sync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | CalleeFlexibleAccessPath | cspawn.sync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | receiverName | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn.sync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | receiverName | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:12 | myResult | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:12 | myResult | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:12 | myResult | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:68 | myResul ... tf8' }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:68 | myResul ... tf8' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:68 | myResul ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:21 | cspawn | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:21 | cspawn | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:21 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:26 | cspawn.sync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:26 | cspawn.sync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:26 | cspawn.sync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | cspawn. ... tf8' }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | cspawn. ... tf8' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | cspawn. ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | exceptional return of cspawn. ... tf8' }) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | exceptional return of cspawn. ... tf8' }) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | exceptional return of cspawn. ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:23:159:26 | sync | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:23:159:26 | sync | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:23:159:26 | sync | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | CalleeFlexibleAccessPath | cspawn.sync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | receiverName | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn.sync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | receiverName | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn.sync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | receiverName | cspawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:57 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:57 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:57 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | CalleeFlexibleAccessPath | cspawn.sync | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | InputAccessPathFromCallee | 2.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | calleeImports | cross-spawn | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:11 | execmod | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:11 | execmod | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:11 | execmod | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod ... 'exec') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod ... 'exec') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod ... 'exec') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:21 | require | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:21 | require | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | exceptional return of require('exec') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | exceptional return of require('exec') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | exceptional return of require('exec') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | require('exec') | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | require('exec') | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | require('exec') | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | CalleeFlexibleAccessPath | require | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | calleeImports | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:7 | execmod | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:7 | execmod | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:7 | execmod | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | exceptional return of execmod ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | exceptional return of execmod ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | exceptional return of execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | execmod ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | execmod ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | receiverName | console | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:7 | execmod | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:7 | execmod | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:7 | execmod | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | exceptional return of execmod ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | exceptional return of execmod ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | exceptional return of execmod ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | execmod ... utf8'}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | execmod ... utf8'}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | execmod ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:32 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:32 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:32 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:7 | execmod | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:7 | execmod | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:7 | execmod | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | exceptional return of execmod ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | exceptional return of execmod ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | exceptional return of execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | execmod ... (out)}) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | execmod ... (out)}) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:32 | encoding | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:32 | encoding | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:32 | encoding | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | InputAccessPathFromCallee | 1.encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | InputArgumentIndex | 1 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | assignedToPropName | encoding | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | CalleeFlexibleAccessPath | execmod | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | InputArgumentIndex | 2 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | calleeImports | exec | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | contextSurroundingFunctionParameters | | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | CalleeFlexibleAccessPath | console.log | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | InputArgumentIndex | 0 | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | contextFunctionInterfaces | cat(file) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | contextSurroundingFunctionParameters | (err, out) | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | enclosingFunctionBody | err out console log out | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | enclosingFunctionName | execmod#functionalargument | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | fileImports | child_process cross-spawn exec express fs shelljs | +| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | receiverName | console | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:0 | this | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | join | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | join | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | parse | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | parse | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | readFileSync | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | readFileSync | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:34 | import ... m 'fs'; | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:34 | import ... m 'fs'; | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:34 | import ... m 'fs'; | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:30:1:33 | 'fs' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:30:1:33 | 'fs' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:1:30:1:33 | 'fs' | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:1:2:36 | import ... 'http'; | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:1:2:36 | import ... 'http'; | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:1:2:36 | import ... 'http'; | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:30:2:35 | 'http' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:30:2:35 | 'http' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:2:30:2:35 | 'http' | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:1:3:28 | import ... 'url'; | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:1:3:28 | import ... 'url'; | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:1:3:28 | import ... 'url'; | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:23:3:27 | 'url' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:23:3:27 | 'url' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:3:23:3:27 | 'url' | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:1:4:28 | import ... 'path'; | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:1:4:28 | import ... 'path'; | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:1:4:28 | import ... 'path'; | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:22:4:27 | 'path' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:22:4:27 | 'path' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:4:22:4:27 | 'path' | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:6:10 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:6:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:6:10 | server | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:11:2 | server ... )));\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:11:2 | server ... )));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:11:2 | server ... )));\\n}) | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:6:25 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:6:25 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:6:25 | createServer | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | createS ... )));\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | createS ... )));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | createS ... )));\\n}) | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | exceptional return of createS ... )));\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | exceptional return of createS ... )));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | exceptional return of createS ... )));\\n}) | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | fileImports | fs http path url | | autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | CalleeFlexibleAccessPath | createServer | | autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | calleeImports | http | | autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | contextFunctionInterfaces | | | autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path = ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path = ... ry.path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path = ... ry.path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path = ... ry.path | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | fileImports | fs http path url | | autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | CalleeFlexibleAccessPath | parse | | autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | calleeImports | url | @@ -4604,6 +57887,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | | autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | enclosingFunctionName | createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | fileImports | fs http path url | | autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | CalleeFlexibleAccessPath | parse | | autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | calleeImports | url | @@ -4612,6 +57900,51 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | | autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | enclosingFunctionName | createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ... path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ... path)) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ... path)) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ... path)) | fileImports | fs http path url | | autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ... path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ... path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ... path)) | contextFunctionInterfaces | | @@ -4620,6 +57953,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ... path)) | enclosingFunctionName | createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ... path)) | fileImports | fs http path url | | autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ... path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | enclosingFunctionName | createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | fileImports | fs http path url | | autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | CalleeFlexibleAccessPath | readFileSync | | autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | calleeImports | fs | @@ -4644,36 +57987,211 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path | | autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | enclosingFunctionName | createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | fileImports | fs http path url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | cp | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | cp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | normalizeUrl | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | sanitize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs = require('fs') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:16 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:16 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | exceptional return of require('fs') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | require('fs') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | require('fs') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | calleeImports | | | autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:8 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:8 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http = ... 'http') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:18 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:18 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | exceptional return of require('http') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | require('http') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | require('http') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | calleeImports | | | autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url = require('url') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:17 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:17 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | exceptional return of require('url') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | require('url') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | require('url') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | calleeImports | | | autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitiz ... ename') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:22 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:22 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | exceptional return of require ... ename') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | require ... ename') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | require ... ename') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | calleeImports | | | autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathMod ... 'path') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:24 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:24 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | exceptional return of require('path') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | require('path') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | require('path') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | calleeImports | | | autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:5:8:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:5:8:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:5:8:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:5:61:2 | server ... )));\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:5:61:2 | server ... )));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:5:61:2 | server ... )));\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:14:8:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:14:8:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:14:8:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:14:8:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:14:8:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | exceptional return of http.cr ... )));\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | exceptional return of http.cr ... )));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | exceptional return of http.cr ... )));\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | http.cr ... )));\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | http.cr ... )));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | http.cr ... )));\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:19:8:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:19:8:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:19:8:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | calleeImports | http | @@ -4681,6 +58199,86 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | calleeImports | url | @@ -4690,6 +58288,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | calleeImports | url | @@ -4699,6 +58302,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4707,6 +58360,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | calleeImports | fs | @@ -4716,6 +58374,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ... path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ... path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ... path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ... path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ... path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ... path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ... path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ... path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ... path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | contextFunctionInterfaces | views_local(req, res) | @@ -4724,6 +58422,17 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | stringConcatenatedWith | -endpoint- path | | autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | calleeImports | fs | @@ -4733,6 +58442,37 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | stringConcatenatedWith | '/home/user/' -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | calleeImports | url | @@ -4742,6 +58482,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4750,6 +58530,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | calleeImports | fs | @@ -4759,6 +58544,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | CalleeFlexibleAccessPath | path.indexOf | | autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | calleeImports | url | @@ -4768,6 +58578,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4776,6 +58636,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | calleeImports | fs | @@ -4785,6 +58650,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | CalleeFlexibleAccessPath | fs.existsSync | | autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | calleeImports | fs | @@ -4794,6 +58684,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4802,6 +58732,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | calleeImports | fs | @@ -4811,6 +58746,71 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4819,6 +58819,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | calleeImports | fs | @@ -4828,6 +58833,111 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4836,6 +58946,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | calleeImports | fs | @@ -4845,6 +58960,131 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4853,6 +59093,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | calleeImports | fs | @@ -4862,11 +59107,81 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path = ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path = ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path = ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path = ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path = ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | | autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -4875,6 +59190,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | calleeImports | fs | @@ -4884,6 +59204,61 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | calleeImports | url | @@ -4893,6 +59268,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | calleeImports | url | @@ -4902,6 +59282,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -4910,6 +59340,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | calleeImports | fs | @@ -4919,6 +59369,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | CalleeFlexibleAccessPath | pathModule.basename | | autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | calleeImports | path | @@ -4928,6 +59383,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -4936,6 +59431,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | calleeImports | fs | @@ -4945,6 +59460,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | CalleeFlexibleAccessPath | pathModule.dirname | | autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | calleeImports | path | @@ -4954,6 +59474,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -4962,6 +59522,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | calleeImports | fs | @@ -4971,6 +59551,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | CalleeFlexibleAccessPath | pathModule.extname | | autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | calleeImports | path | @@ -4980,6 +59565,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -4988,6 +59613,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | calleeImports | fs | @@ -4997,6 +59642,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | calleeImports | path | @@ -5006,6 +59656,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) | @@ -5014,6 +59704,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | calleeImports | fs | @@ -5023,6 +59733,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | calleeImports | path | @@ -5059,6 +59774,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -5067,6 +59822,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | calleeImports | fs | @@ -5076,6 +59851,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | calleeImports | path | @@ -5085,6 +59865,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ... path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ... path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ... path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ... path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ... path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ... path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ... path)) | contextFunctionInterfaces | views_local(req, res) | @@ -5093,6 +59913,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ... path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ... path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ... path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | calleeImports | fs | @@ -5102,6 +59942,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | calleeImports | path | @@ -5120,6 +59965,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | contextFunctionInterfaces | views_local(req, res) | @@ -5128,6 +60013,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | calleeImports | fs | @@ -5137,6 +60042,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | calleeImports | path | @@ -5155,6 +60065,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -5163,6 +60113,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | calleeImports | fs | @@ -5172,6 +60142,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | CalleeFlexibleAccessPath | pathModule.resolve | | autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | calleeImports | path | @@ -5181,6 +60156,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) | @@ -5189,6 +60204,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | calleeImports | fs | @@ -5198,6 +60233,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | CalleeFlexibleAccessPath | pathModule.resolve | | autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | calleeImports | path | @@ -5234,6 +60274,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -5242,6 +60322,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | calleeImports | fs | @@ -5251,6 +60351,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path | +| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | CalleeFlexibleAccessPath | pathModule.toNamespacedPath | | autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | calleeImports | path | @@ -5260,6 +60365,39 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:7 | angular | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:7 | angular | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:7 | angular | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:14 | angular.module | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:14 | angular.module | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:14 | angular.module | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | angular ... p', []) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | angular ... p', []) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | angular ... p', []) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | exceptional return of angular ... p', []) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | exceptional return of angular ... p', []) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | exceptional return of angular ... p', []) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:64:14 | angular ... rective | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:64:14 | angular ... rective | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:64:14 | angular ... rective | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | angular ... \\n }) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | angular ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | angular ... \\n }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | exceptional return of angular ... \\n }) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | exceptional return of angular ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | exceptional return of angular ... \\n }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:69:14 | angular ... rective | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:69:14 | angular ... rective | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:69:14 | angular ... rective | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | angular ... \\n }) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | angular ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | angular ... \\n }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | exceptional return of angular ... \\n }) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | exceptional return of angular ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | exceptional return of angular ... \\n }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:63:9:63:14 | module | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:63:9:63:14 | module | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:63:9:63:14 | module | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | CalleeFlexibleAccessPath | angular.module | | autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | contextFunctionInterfaces | views_local(req, res) | @@ -5272,26 +60410,144 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | receiverName | angular | +| autogenerated/TaintedPath/TaintedPath.js:64:6:64:14 | directive | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:64:6:64:14 | directive | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:64:6:64:14 | directive | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | CalleeFlexibleAccessPath | angular.module().directive | | autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n } | CalleeFlexibleAccessPath | angular.module().directive | | autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n } | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n } | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n } | contextSurroundingFunctionParameters | () | | autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n ... } | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n ... } | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n ... } | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n ... } | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n ... } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | assignedToPropName | templateUrl | +| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | enclosingFunctionBody | templateUrl SAFE | +| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:69:6:69:14 | directive | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:69:6:69:14 | directive | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:69:6:69:14 | directive | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | CalleeFlexibleAccessPath | angular.module().directive().directive | | autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n } | CalleeFlexibleAccessPath | angular.module().directive().directive | | autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n } | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n } | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n } | contextSurroundingFunctionParameters | () | | autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n ... } | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n ... } | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n ... } | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n ... } | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n ... } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | assignedToPropName | templateUrl | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | enclosingFunctionBody | templateUrl Cookie get unsafe | +| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | enclosingFunctionName | directive#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | CalleeFlexibleAccessPath | Cookie.get | | autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | contextFunctionInterfaces | views_local(req, res) | @@ -5300,6 +60556,52 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | enclosingFunctionName | directive#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | receiverName | Cookie | +| autogenerated/TaintedPath/TaintedPath.js:75:5:75:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:5:75:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:5:75:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:5:80:2 | server ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:5:80:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:5:80:2 | server ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:14:75:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:14:75:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:14:75:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:14:75:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:14:75:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:14:75:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:19:75:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:19:75:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:19:75:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | calleeImports | http | @@ -5307,6 +60609,71 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) | @@ -5315,6 +60682,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | calleeImports | fs | @@ -5332,6 +60734,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | | autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | CalleeFlexibleAccessPath | import(!).parse | | autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | calleeImports | querystringify | @@ -5340,6 +60752,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | | autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) | @@ -5348,6 +60810,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | calleeImports | fs | @@ -5365,6 +60862,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | | autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | CalleeFlexibleAccessPath | import(!).parse | | autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | calleeImports | query-string | @@ -5373,6 +60880,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | | autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) | @@ -5381,6 +60938,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | calleeImports | fs | @@ -5398,6 +60990,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | | autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | CalleeFlexibleAccessPath | import(!).parse | | autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | calleeImports | querystring | @@ -5406,6 +61008,83 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | | autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query | +| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:2 | (functi ... d);\\n\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:2 | (functi ... d);\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:2 | (functi ... d);\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | (functi ... ;\\n\\n})() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | (functi ... ;\\n\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | (functi ... ;\\n\\n})() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | exceptional return of (functi ... ;\\n\\n})() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | exceptional return of (functi ... ;\\n\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | exceptional return of (functi ... ;\\n\\n})() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | functio ... ed);\\n\\n} | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | functio ... ed);\\n\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | functio ... ed);\\n\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | calleeImports | | @@ -5414,6 +61093,126 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | | autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | enclosingFunctionName | | | autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | CalleeFlexibleAccessPath | res.render | | autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | contextFunctionInterfaces | views_local(req, res) | @@ -5422,6 +61221,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | enclosingFunctionName | | | autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | contextSurroundingFunctionParameters | ()\n(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | CalleeFlexibleAccessPath | application.get | | autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | calleeImports | express | @@ -5440,6 +61274,36 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | enclosingFunctionName | | | autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | receiverName | application | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | calleeImports | | @@ -5448,6 +61312,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | | autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | enclosingFunctionName | | | autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported | +| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | enclosingFunctionName | | +| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | CalleeFlexibleAccessPath | application.get | | autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | calleeImports | express | @@ -5466,16 +61355,75 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | enclosingFunctionName | | | autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | receiverName | application | +| autogenerated/TaintedPath/TaintedPath.js:95:1:95:16 | addEventListener | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:1:95:16 | addEventListener | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:95:1:95:16 | addEventListener | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | addEven ... ta);\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | addEven ... ta);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | addEven ... ta);\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | exceptional return of addEven ... ta);\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | exceptional return of addEven ... ta);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | exceptional return of addEven ... ta);\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | CalleeFlexibleAccessPath | addEventListener | | autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | CalleeFlexibleAccessPath | addEventListener | | autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | contextSurroundingFunctionParameters | (ev) | | autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextSurroundingFunctionParameters | (ev) | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | contextSurroundingFunctionParameters | (ev) | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | contextSurroundingFunctionParameters | (ev) | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | contextSurroundingFunctionParameters | (ev) | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | contextSurroundingFunctionParameters | (ev) | +| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | CalleeFlexibleAccessPath | Cookie.set | | autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | contextFunctionInterfaces | views_local(req, res) | @@ -5484,6 +61432,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | enclosingFunctionName | addEventListener#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | receiverName | Cookie | +| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | contextSurroundingFunctionParameters | (ev) | +| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | CalleeFlexibleAccessPath | Cookie.set | | autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | contextFunctionInterfaces | views_local(req, res) | @@ -5492,6 +61445,62 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | enclosingFunctionName | addEventListener#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | receiverName | Cookie | +| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | contextSurroundingFunctionParameters | (ev) | +| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | enclosingFunctionBody | ev Cookie set unsafe ev data | +| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:5:99:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:5:99:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:5:99:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:5:109:2 | server ... );\\n\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:5:109:2 | server ... );\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:5:109:2 | server ... );\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:14:99:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:14:99:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:14:99:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:14:99:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:14:99:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:14:99:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | exceptional return of http.cr ... );\\n\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | exceptional return of http.cr ... );\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | exceptional return of http.cr ... );\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | http.cr ... );\\n\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | http.cr ... );\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | http.cr ... );\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:19:99:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:19:99:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:19:99:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ... );\\n\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ... );\\n\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ... );\\n\\n} | calleeImports | http | @@ -5499,6 +61508,89 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ... );\\n\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ... );\\n\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ... );\\n\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | calleeImports | url | @@ -5508,6 +61600,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | calleeImports | url | @@ -5517,6 +61614,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) | @@ -5525,6 +61672,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | calleeImports | fs | @@ -5534,6 +61701,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | CalleeFlexibleAccessPath | fs.realpathSync | | autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | calleeImports | fs | @@ -5543,6 +61715,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ... ) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ... ) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ... ) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ... ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ... ) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ... ) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ... ) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ... ) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ... ) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ... ) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | CalleeFlexibleAccessPath | fs.realpath | | autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | calleeImports | fs | @@ -5552,6 +61749,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ... } | CalleeFlexibleAccessPath | fs.realpath | | autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ... } | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ... } | calleeImports | fs | @@ -5561,6 +61783,66 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ... } | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ... } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ... } | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | contextFunctionInterfaces | views_local(req, res) | @@ -5569,6 +61851,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) | +| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath | +| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | calleeImports | fs | @@ -5578,6 +61865,52 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:111:5:111:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:5:111:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:5:111:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:5:120:2 | server ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:5:120:2 | server ... ove.\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:5:120:2 | server ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:14:111:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:14:111:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:14:111:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:14:111:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:14:111:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:14:111:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | exceptional return of http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | exceptional return of http.cr ... ove.\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | exceptional return of http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | http.cr ... ove.\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:19:111:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:19:111:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:19:111:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | calleeImports | http | @@ -5585,6 +61918,86 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | calleeImports | url | @@ -5594,6 +62007,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | calleeImports | url | @@ -5603,11 +62021,71 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path = ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path = ... /g, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path = ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path = ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path = ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | | autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | calleeImports | url | @@ -5626,11 +62104,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path = ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path = ... /g, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path = ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path = ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path = ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | | autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | calleeImports | url | @@ -5649,6 +62162,51 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -5657,6 +62215,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | calleeImports | fs | @@ -5666,6 +62229,52 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:122:5:122:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:5:122:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:5:122:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:5:133:2 | server ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:5:133:2 | server ... ove.\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:5:133:2 | server ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:14:122:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:14:122:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:14:122:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:14:122:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:14:122:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:14:122:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | exceptional return of http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | exceptional return of http.cr ... ove.\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | exceptional return of http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | http.cr ... ove.\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:19:122:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:19:122:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:19:122:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | calleeImports | http | @@ -5673,6 +62282,86 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | calleeImports | url | @@ -5682,6 +62371,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | calleeImports | url | @@ -5691,11 +62385,76 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path = ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path = ... /g, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path = ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path = ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path = ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | | autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | calleeImports | url | @@ -5714,11 +62473,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path = ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path = ... /g, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path = ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path = ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path = ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | | autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | calleeImports | url | @@ -5737,6 +62531,51 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | @@ -5745,6 +62584,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g path path replace /\\.\\./g res write fs readFileSync path | +| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | calleeImports | fs | @@ -5754,6 +62598,52 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:135:5:135:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:5:135:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:5:135:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:5:139:2 | server ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:5:139:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:5:139:2 | server ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:14:135:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:14:135:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:14:135:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:14:135:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:14:135:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:14:135:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:19:135:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:19:135:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:19:135:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | calleeImports | http | @@ -5761,6 +62651,81 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | calleeImports | url | @@ -5770,6 +62735,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | calleeImports | url | @@ -5779,6 +62749,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | enclosingFunctionBody | req res path url parse req url true query path require send req path | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | calleeImports | | @@ -5803,6 +62808,52 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path | | autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:5:141:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:5:141:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:5:141:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:5:163:2 | server ... OK \\n\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:5:163:2 | server ... OK \\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:5:163:2 | server ... OK \\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:14:141:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:14:141:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:14:141:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:14:141:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:14:141:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:14:141:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | exceptional return of http.cr ... OK \\n\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | exceptional return of http.cr ... OK \\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | exceptional return of http.cr ... OK \\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | http.cr ... OK \\n\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | http.cr ... OK \\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | http.cr ... OK \\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:19:141:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:19:141:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:19:141:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ... OK \\n\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ... OK \\n\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ... OK \\n\\n} | calleeImports | http | @@ -5810,6 +62861,81 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ... OK \\n\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ... OK \\n\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ... OK \\n\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | calleeImports | url | @@ -5819,6 +62945,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | calleeImports | url | @@ -5828,6 +62959,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | calleeImports | fs | @@ -5837,6 +63003,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | calleeImports | url | @@ -5846,6 +63052,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | calleeImports | fs | @@ -5855,6 +63101,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | CalleeFlexibleAccessPath | split.join | | autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | calleeImports | url | @@ -5864,6 +63115,37 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | receiverName | split | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | stringConcatenatedWith | -endpoint- split.? | | autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix ... th - 1] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix ... th - 1] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix ... th - 1] | calleeImports | fs | @@ -5873,6 +63155,72 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix ... th - 1] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix ... th - 1] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix ... th - 1] | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | stringConcatenatedWith | prefix -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | calleeImports | fs | @@ -5882,6 +63230,42 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | stringConcatenatedWith | -endpoint- split.? | | autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | calleeImports | fs | @@ -5891,6 +63275,63 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | stringConcatenatedWith | prefix -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | stringConcatenatedWith | -endpoint- split | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | CalleeFlexibleAccessPath | prefix.concat | | autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | contextFunctionInterfaces | views_local(req, res) | @@ -5900,6 +63341,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | receiverName | prefix | | autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | stringConcatenatedWith | prefix -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | calleeImports | fs | @@ -5909,6 +63385,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | CalleeFlexibleAccessPath | concatted.join | | autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | contextFunctionInterfaces | views_local(req, res) | @@ -5917,6 +63403,47 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | receiverName | concatted | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | stringConcatenatedWith | -endpoint- prefix | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | CalleeFlexibleAccessPath | split.concat | | autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | calleeImports | url | @@ -5927,6 +63454,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | receiverName | split | | autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | stringConcatenatedWith | split -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | calleeImports | fs | @@ -5936,6 +63498,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | CalleeFlexibleAccessPath | concatted2.join | | autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | calleeImports | url | @@ -5945,6 +63517,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | receiverName | concatted2 | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | calleeImports | fs | @@ -5954,6 +63566,62 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop | +| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:5:165:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:5:165:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:5:165:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:5:196:2 | server ... ute)\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:5:196:2 | server ... ute)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:5:196:2 | server ... ute)\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:14:165:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:14:165:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:14:165:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:14:165:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:14:165:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:14:165:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | exceptional return of http.cr ... ute)\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | exceptional return of http.cr ... ute)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | exceptional return of http.cr ... ute)\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | http.cr ... ute)\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | http.cr ... ute)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | http.cr ... ute)\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:19:165:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:19:165:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:19:165:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | calleeImports | http | @@ -5961,6 +63629,86 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | calleeImports | url | @@ -5970,6 +63718,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | calleeImports | url | @@ -5979,6 +63732,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -5987,6 +63790,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | calleeImports | fs | @@ -5996,6 +63819,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | calleeImports | url | @@ -6014,6 +63842,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6022,6 +63890,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | calleeImports | fs | @@ -6031,6 +63919,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | calleeImports | url | @@ -6049,6 +63942,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6057,6 +63990,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | calleeImports | fs | @@ -6066,6 +64019,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | calleeImports | url | @@ -6084,6 +64042,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6092,6 +64090,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | calleeImports | fs | @@ -6101,6 +64119,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | calleeImports | url | @@ -6119,6 +64142,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6127,6 +64190,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | calleeImports | fs | @@ -6136,6 +64219,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | calleeImports | url | @@ -6154,6 +64242,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6162,6 +64290,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | calleeImports | fs | @@ -6171,6 +64319,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | calleeImports | url | @@ -6189,6 +64342,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6197,6 +64390,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | calleeImports | fs | @@ -6206,6 +64419,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | calleeImports | url | @@ -6224,6 +64442,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6232,6 +64490,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | calleeImports | fs | @@ -6241,6 +64519,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | calleeImports | url | @@ -6259,6 +64542,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6267,6 +64590,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | calleeImports | fs | @@ -6276,6 +64619,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | calleeImports | url | @@ -6294,6 +64642,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6302,6 +64690,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | calleeImports | fs | @@ -6311,6 +64719,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | calleeImports | url | @@ -6329,6 +64742,76 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6337,6 +64820,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | calleeImports | fs | @@ -6346,6 +64849,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | calleeImports | url | @@ -6364,6 +64872,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6372,6 +64920,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | calleeImports | fs | @@ -6381,6 +64949,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | calleeImports | url | @@ -6399,6 +64972,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6407,6 +65020,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | calleeImports | fs | @@ -6416,6 +65049,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | calleeImports | url | @@ -6434,6 +65072,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6442,6 +65120,26 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | calleeImports | fs | @@ -6451,6 +65149,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | calleeImports | url | @@ -6469,6 +65172,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6477,6 +65220,17 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | stringConcatenatedWith | -endpoint- pathModule.normalize().replace() | | autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | calleeImports | fs | @@ -6486,6 +65240,47 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | calleeImports | path | @@ -6495,6 +65290,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace | | autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | calleeImports | path | @@ -6511,6 +65311,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | | autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6519,6 +65359,17 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | stringConcatenatedWith | -endpoint- pathModule.normalize().replace() | | autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | calleeImports | fs | @@ -6528,6 +65379,47 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | calleeImports | path | @@ -6537,6 +65429,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace | | autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | calleeImports | path | @@ -6553,6 +65450,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | | autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6561,6 +65498,17 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | stringConcatenatedWith | -endpoint- pathModule.normalize().replace() | | autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | calleeImports | fs | @@ -6570,6 +65518,47 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | calleeImports | path | @@ -6579,6 +65568,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace | | autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | calleeImports | path | @@ -6595,6 +65589,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | | autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6603,6 +65637,17 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | stringConcatenatedWith | -endpoint- pathModule.normalize().replace() | | autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | calleeImports | fs | @@ -6612,6 +65657,47 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | stringConcatenatedWith | 'prefix' -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | calleeImports | path | @@ -6621,6 +65707,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | CalleeFlexibleAccessPath | pathModule.normalize().replace | | autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | calleeImports | path | @@ -6637,6 +65728,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | | autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6645,6 +65776,17 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | stringConcatenatedWith | -endpoint- path.replace() | | autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | calleeImports | fs | @@ -6654,6 +65796,32 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint- | +| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | calleeImports | url | @@ -6672,6 +65840,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | receiverName | path | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) | @@ -6680,6 +65888,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | calleeImports | fs | @@ -6689,6 +65932,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | calleeImports | path | @@ -6698,6 +65946,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | receiverName | pathModule | +| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | +| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace | | autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | calleeImports | path | @@ -6714,6 +65967,73 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g res write fs readFileSync path replace /[abcd]/g res write fs readFileSync path replace /[./]/g res write fs readFileSync path replace /[foobar/foobar]/g res write fs readFileSync path replace /\\//g res write fs readFileSync path replace /\\.\|\\//g res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g pathModule isAbsolute path res write fs readFileSync path replace /[.]/g res write fs readFileSync path replace /[..]/g res write fs readFileSync path replace /\\./g res write fs readFileSync path replace /\\.\\.\|BLA/g res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/ res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/ res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/ res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/ | | autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:198:1:198:41 | import ... e-url'; | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:198:1:198:41 | import ... e-url'; | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:198:1:198:41 | import ... e-url'; | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:198:26:198:40 | 'normalize-url' | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:198:26:198:40 | 'normalize-url' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:198:26:198:40 | 'normalize-url' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:5:200:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:5:200:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:5:200:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:5:207:2 | server ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:5:207:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:5:207:2 | server ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:14:200:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:14:200:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:14:200:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:14:200:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:14:200:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:14:200:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:19:200:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:19:200:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:19:200:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | calleeImports | http | @@ -6721,6 +66041,61 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | calleeImports | | @@ -6729,6 +66104,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | | autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) | @@ -6737,6 +66152,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | calleeImports | fs | @@ -6746,6 +66186,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | CalleeFlexibleAccessPath | qs.parse | | autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | calleeImports | qs | @@ -6755,6 +66205,56 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | receiverName | qs | +| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | contextFunctionInterfaces | views_local(req, res) | @@ -6763,6 +66263,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | calleeImports | fs | @@ -6772,6 +66297,21 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | CalleeFlexibleAccessPath | qs.parse | | autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | calleeImports | qs | @@ -6781,6 +66321,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | receiverName | qs | +| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | CalleeFlexibleAccessPath | normalizeUrl | | autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | calleeImports | normalize-url | @@ -6789,6 +66334,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | | autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | calleeImports | | @@ -6797,6 +66382,46 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | | autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) | @@ -6805,6 +66430,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | receiverName | res | +| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | calleeImports | fs | @@ -6814,6 +66464,16 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | receiverName | fs | +| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | CalleeFlexibleAccessPath | parseqs.decode | | autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | calleeImports | parseqs | @@ -6823,12 +66483,87 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | receiverName | parseqs | +| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo | +| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp = re ... ocess") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp = re ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp = re ... ocess") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:18 | require | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:18 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | exceptional return of require ... ocess") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | require ... ocess") | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | require ... ocess") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | require ... ocess") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | calleeImports | | | autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | contextFunctionInterfaces | views_local(req, res) | | autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:5:210:10 | server | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:5:210:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:5:210:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:5:215:2 | server ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:5:215:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:5:215:2 | server ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:14:210:17 | http | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:14:210:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:14:210:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:14:210:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:14:210:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:14:210:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:19:210:30 | createServer | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:19:210:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:19:210:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | calleeImports | http | @@ -6836,6 +66571,81 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path = ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path = ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | calleeImports | url | @@ -6845,6 +66655,11 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | calleeImports | url | @@ -6854,6 +66669,41 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | receiverName | url | +| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ... path}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ... path}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ... path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ... path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ... path}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ... path}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ... path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ... path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | CalleeFlexibleAccessPath | cp.execSync | | autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | calleeImports | child_process | @@ -6872,6 +66722,21 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | receiverName | cp | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | CalleeFlexibleAccessPath | cp.execSync | | autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | InputAccessPathFromCallee | 1.cwd | | autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | InputArgumentIndex | 1 | @@ -6882,6 +66747,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | | autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ... path}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ... path}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ... path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ... path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ... path}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ... path}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ... path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ... path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | CalleeFlexibleAccessPath | cp.execFileSync | | autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | calleeImports | child_process | @@ -6901,9 +66791,14 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | receiverName | cp | | autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | | autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | CalleeFlexibleAccessPath | cp.execFileSync | | autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | InputArgumentIndex | 2 | @@ -6914,6 +66809,21 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | receiverName | cp | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | CalleeFlexibleAccessPath | cp.execFileSync | | autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | InputAccessPathFromCallee | 2.cwd | | autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | InputArgumentIndex | 2 | @@ -6924,6 +66834,31 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | | autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ... path}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ... path}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ... path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ... path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ... path}) | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ... path}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ... path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ... path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | CalleeFlexibleAccessPath | cp.execFileSync | | autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | calleeImports | child_process | @@ -6942,6 +66877,21 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | receiverName | cp | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextFunctionInterfaces | views_local(req, res) | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | | autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | CalleeFlexibleAccessPath | cp.execFileSync | | autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | InputAccessPathFromCallee | 1.cwd | | autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | InputArgumentIndex | 1 | @@ -6952,18 +66902,99 @@ tokenFeatures | autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path | | autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url | +| autogenerated/TaintedPath/express.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:1:1:0 | this | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:1:1:1 | require | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:1:5:1:11 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:5:1:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:5:1:11 | express | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:1:5:1:32 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:5:1:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:5:1:32 | express | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:1:5:1:32 | express ... press") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:5:1:32 | express ... press") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:5:1:32 | express ... press") | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:1:15:1:21 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:15:1:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:15:1:21 | require | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:1:15:1:32 | exceptional return of require("express") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:15:1:32 | exceptional return of require("express") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:15:1:32 | exceptional return of require("express") | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:1:15:1:32 | require("express") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:1:15:1:32 | require("express") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:1:15:1:32 | require("express") | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | calleeImports | | | autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | contextFunctionInterfaces | | | autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:2:3:2:12 | fileUpload | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:2:3:2:12 | fileUpload | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:2:3:2:12 | fileUpload | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpl ... pload") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpl ... pload") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpl ... pload") | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpload | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpload | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpload | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:2:16:2:22 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:2:16:2:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:2:16:2:22 | require | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:2:16:2:44 | exceptional return of require ... pload") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:2:16:2:44 | exceptional return of require ... pload") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:2:16:2:44 | exceptional return of require ... pload") | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:2:16:2:44 | require ... pload") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:2:16:2:44 | require ... pload") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:2:16:2:44 | require ... pload") | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | calleeImports | | | autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | contextFunctionInterfaces | | | autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:4:5:4:7 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:4:5:4:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:4:5:4:7 | app | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:4:5:4:19 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:4:5:4:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:4:5:4:19 | app | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:4:5:4:19 | app = express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:4:5:4:19 | app = express() | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:4:11:4:17 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:4:11:4:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:4:11:4:17 | express | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:4:11:4:19 | exceptional return of express() | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:4:11:4:19 | express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:4:11:4:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:4:11:4:19 | express() | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:5:1:5:3 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:5:1:5:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:5:1:5:3 | app | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:5:1:5:7 | app.use | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:5:1:5:7 | app.use | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:5:1:5:7 | app.use | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:5:1:5:21 | app.use ... load()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:5:1:5:21 | app.use ... load()) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:5:1:5:21 | app.use ... load()) | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:5:1:5:21 | exceptional return of app.use ... load()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:5:1:5:21 | exceptional return of app.use ... load()) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:5:1:5:21 | exceptional return of app.use ... load()) | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:5:5:5:7 | use | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:5:5:5:7 | use | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:5:5:5:7 | use | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:5:9:5:18 | fileUpload | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:5:9:5:18 | fileUpload | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:5:9:5:18 | fileUpload | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:5:9:5:20 | exceptional return of fileUpload() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:5:9:5:20 | exceptional return of fileUpload() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:5:9:5:20 | exceptional return of fileUpload() | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | CalleeFlexibleAccessPath | app.use | | autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | InputArgumentIndex | 0 | | autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | calleeImports | express | @@ -6971,6 +67002,21 @@ tokenFeatures | autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | receiverName | app | +| autogenerated/TaintedPath/express.js:7:1:7:3 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:1:7:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:1:7:3 | app | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:1:7:7 | app.get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:1:7:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:1:7:7 | app.get | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:1:9:2 | app.get ... ar);\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:1:9:2 | app.get ... ar);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:1:9:2 | app.get ... ar);\\n}) | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:1:9:2 | exceptional return of app.get ... ar);\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:1:9:2 | exceptional return of app.get ... ar);\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:1:9:2 | exceptional return of app.get ... ar);\\n}) | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:5:7:7 | get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:5:7:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:5:7:7 | get | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | calleeImports | express | @@ -6978,6 +67024,21 @@ tokenFeatures | autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | receiverName | app | +| autogenerated/TaintedPath/express.js:7:23:7:22 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:23:7:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:23:7:22 | this | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:7:23:7:22 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:7:23:7:22 | this | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | calleeImports | express | @@ -6985,6 +67046,81 @@ tokenFeatures | autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | receiverName | app | +| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:33:7:35 | req | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:7:38:7:40 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:7:38:7:40 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:7:38:7:40 | res | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:7:38:7:40 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:7:38:7:40 | res | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:3:8:5 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:3:8:5 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:3:8:5 | req | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:3:8:5 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:3:8:5 | req | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:7:8:11 | files | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:7:8:11 | files | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:7:8:11 | files | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:7:8:11 | files | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:7:8:11 | files | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:20:8:22 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:20:8:22 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:20:8:22 | req | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:20:8:22 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:20:8:22 | req | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | fileImports | express express-fileupload | | autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | CalleeFlexibleAccessPath | req.files.foo.mv | | autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | InputArgumentIndex | 0 | | autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | contextFunctionInterfaces | | @@ -6992,24 +67128,205 @@ tokenFeatures | autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | enclosingFunctionBody | req res req files foo mv req query bar | | autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:24:8:28 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:24:8:28 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:24:8:28 | query | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:24:8:28 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:24:8:28 | query | fileImports | express express-fileupload | +| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | contextFunctionInterfaces | | +| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | enclosingFunctionBody | req res req files foo mv req query bar | +| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | fileImports | express express-fileupload | +| autogenerated/TaintedPath/handlebars.js:1:1:1:0 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:1:1:0 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | hb | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | require | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:7:1:13 | express | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:7:1:13 | express | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express ... press') | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express ... press') | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:17:1:23 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:17:1:23 | require | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | exceptional return of require('express') | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | require('express') | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | require('express') | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | calleeImports | | | autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | | autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb = re ... ebars") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb = re ... ebars") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb = re ... ebars") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:2:12:2:18 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:2:12:2:18 | require | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | exceptional return of require ... ebars") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | exceptional return of require ... ebars") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | exceptional return of require ... ebars") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | require ... ebars") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | require ... ebars") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | require ... ebars") | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | calleeImports | | | autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | | autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs = require("fs") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs = require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs = require("fs") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:3:12:3:18 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:3:12:3:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:3:12:3:18 | require | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | exceptional return of require("fs") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | exceptional return of require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | exceptional return of require("fs") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | require("fs") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | require("fs") | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | calleeImports | | | autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | | autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:5:7:5:9 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:5:7:5:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:5:7:5:9 | app | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app = express() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app = express() | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:5:13:5:19 | express | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:5:13:5:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:5:13:5:19 | express | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | exceptional return of express() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | exceptional return of express() | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | express() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | express() | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data = {} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data = {} | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data = {} | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:7:14:7:15 | {} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:7:14:7:15 | {} | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:7:14:7:15 | {} | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | functio ... }}");\\n} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | functio ... }}");\\n} | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | functio ... }}");\\n} | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n }) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n }) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n }) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | CalleeFlexibleAccessPath | hb.registerHelper | | autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | calleeImports | handlebars | @@ -7019,6 +67336,26 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n } | CalleeFlexibleAccessPath | hb.registerHelper | | autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n } | InputArgumentIndex | 1 | | autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n } | calleeImports | handlebars | @@ -7028,6 +67365,51 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n } | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n } | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n } | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | contextSurroundingFunctionParameters | ()\n(filePath) | +| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextSurroundingFunctionParameters | ()\n(filePath) | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | contextSurroundingFunctionParameters | ()\n(filePath) | +| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | contextSurroundingFunctionParameters | ()\n(filePath) | +| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | contextSurroundingFunctionParameters | ()\n(filePath) | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | contextSurroundingFunctionParameters | ()\n(filePath) | +| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | calleeImports | fs | @@ -7037,6 +67419,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | receiverName | fs | +| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n }) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n }) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n }) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | CalleeFlexibleAccessPath | hb.registerHelper | | autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | calleeImports | handlebars | @@ -7046,6 +67453,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | hb.registerHelper | | autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n } | InputArgumentIndex | 1 | | autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n } | calleeImports | handlebars | @@ -7055,6 +67487,109 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n } | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n } | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n } | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n ... ileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n ... ileSync | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n ... ileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n ... ileSync | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n ... ileSync | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n ... lePath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n ... lePath) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n ... lePath) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n ... lePath) | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n ... lePath) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n ... lePath) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n ... .split | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n ... .split | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n ... .split | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n ... .split | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n ... .split | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n ... t("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n ... t("\\n") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n ... t("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n ... t("\\n") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n ... t("\\n") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n ... t("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n ... t("\\n") | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n ... t("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n ... t("\\n") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n ... t("\\n") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n ... .map | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n ... .map | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n ... .map | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n ... .map | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n ... .map | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n ... + line) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n ... + line) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n ... + line) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n ... + line) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n ... + line) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n ... + line) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n ... + line) | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n ... + line) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n ... + line) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n ... + line) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n ... .join | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n ... .join | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n ... .join | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n ... .join | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n ... .join | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n ... n("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n ... n("\\n") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n ... n("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n ... n("\\n") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n ... n("\\n") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n ... n("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n ... n("\\n") | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n ... n("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n ... n("\\n") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n ... n("\\n") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | calleeImports | fs | @@ -7064,6 +67599,11 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | receiverName | fs | +| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | CalleeFlexibleAccessPath | fs.readFileSync().split | | autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | calleeImports | fs | @@ -7072,6 +67612,21 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | | autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line) ... + line | CalleeFlexibleAccessPath | fs.readFileSync().split().map | | autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line) ... + line | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line) ... + line | calleeImports | fs | @@ -7080,6 +67635,48 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line) ... + line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | | autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line) ... + line | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line) ... + line | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) | +| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | stringConcatenatedWith | -endpoint- line | +| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) | +| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) | +| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | stringConcatenatedWith | prefix -endpoint- | +| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | contextSurroundingFunctionParameters | ()\n(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | CalleeFlexibleAccessPath | fs.readFileSync().split().map().join | | autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | calleeImports | fs | @@ -7088,6 +67685,52 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | | autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | assignedToPropName | compiledFileAccess | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | CalleeFlexibleAccessPath | hb.compile | | autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | calleeImports | handlebars | @@ -7097,6 +67740,52 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | assignedToPropName | compiledBenign | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | CalleeFlexibleAccessPath | hb.compile | | autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | calleeImports | handlebars | @@ -7106,6 +67795,67 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | assignedToPropName | compiledUnknown | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | CalleeFlexibleAccessPath | hb.compile | | autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | calleeImports | handlebars | @@ -7115,6 +67865,11 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | calleeImports | fs | @@ -7124,6 +67879,52 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | receiverName | fs | +| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | assignedToPropName | compiledMixed | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} | +| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | enclosingFunctionName | init | +| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | CalleeFlexibleAccessPath | hb.compile | | autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | calleeImports | handlebars | @@ -7133,6 +67934,30 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | enclosingFunctionName | init | | autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | receiverName | hb | +| autogenerated/TaintedPath/handlebars.js:26:1:26:4 | init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:26:1:26:4 | init | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:26:1:26:4 | init | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | exceptional return of init() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | exceptional return of init() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | exceptional return of init() | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | init() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | init() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | init() | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:1:28:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:1:28:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:1:28:3 | app | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:1:28:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:1:28:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:1:28:7 | app.get | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | app.get ... ile)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | app.get ... ile)\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | exceptional return of app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | exceptional return of app.get ... ile)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | exceptional return of app.get ... ile)\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:5:28:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:5:28:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:5:28:7 | get | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | calleeImports | express | @@ -7140,6 +67965,26 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | calleeImports | express | @@ -7147,6 +67992,66 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | CalleeFlexibleAccessPath | res.send | | autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7155,6 +68060,16 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | receiverName | res | +| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | CalleeFlexibleAccessPath | data.compiledFileAccess | | autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7163,6 +68078,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | receiverName | data | +| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | CalleeFlexibleAccessPath | data.compiledFileAccess | | autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | InputAccessPathFromCallee | 0.path | | autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | InputArgumentIndex | 0 | @@ -7172,6 +68112,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | | autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path | +| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:1:32:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:1:32:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:1:32:3 | app | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:1:32:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:1:32:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:1:32:7 | app.get | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | app.get ... ile)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | app.get ... ile)\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | exceptional return of app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | exceptional return of app.get ... ile)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | exceptional return of app.get ... ile)\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:5:32:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:5:32:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:5:32:7 | get | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | calleeImports | express | @@ -7179,6 +68144,26 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | calleeImports | express | @@ -7186,6 +68171,66 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | CalleeFlexibleAccessPath | res.send | | autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7194,6 +68239,16 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | receiverName | res | +| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | CalleeFlexibleAccessPath | data.compiledBenign | | autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7202,6 +68257,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | receiverName | data | +| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | CalleeFlexibleAccessPath | data.compiledBenign | | autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | InputAccessPathFromCallee | 0.name | | autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | InputArgumentIndex | 0 | @@ -7211,6 +68291,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | enclosingFunctionBody | req res res send data compiledBenign name req params name | | autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | enclosingFunctionBody | req res res send data compiledBenign name req params name | +| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:1:36:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:1:36:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:1:36:3 | app | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:1:36:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:1:36:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:1:36:7 | app.get | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | app.get ... ok)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | app.get ... ok)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | app.get ... ok)\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | exceptional return of app.get ... ok)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | exceptional return of app.get ... ok)\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | exceptional return of app.get ... ok)\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:5:36:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:5:36:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:5:36:7 | get | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | calleeImports | express | @@ -7218,6 +68323,26 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | calleeImports | express | @@ -7225,6 +68350,66 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | CalleeFlexibleAccessPath | res.send | | autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7233,6 +68418,16 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | receiverName | res | +| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | CalleeFlexibleAccessPath | data.compiledUnknown | | autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7241,6 +68436,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | receiverName | data | +| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | CalleeFlexibleAccessPath | data.compiledUnknown | | autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | InputAccessPathFromCallee | 0.name | | autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | InputArgumentIndex | 0 | @@ -7250,6 +68470,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | enclosingFunctionBody | req res res send data compiledUnknown name req params name | | autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | enclosingFunctionBody | req res res send data compiledUnknown name req params name | +| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:1:40:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:1:40:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:1:40:3 | app | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:1:40:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:1:40:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:1:40:7 | app.get | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | app.get ... }));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | app.get ... }));\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | exceptional return of app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | exceptional return of app.get ... }));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | exceptional return of app.get ... }));\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:5:40:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:5:40:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:5:40:7 | get | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | calleeImports | express | @@ -7257,6 +68502,26 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ... }));\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ... }));\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ... }));\\n} | calleeImports | express | @@ -7264,6 +68529,66 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ... }));\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ... }));\\n} | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ... }));\\n} | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ... })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ... })) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ... })) | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ... })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ... })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ... })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ... })) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ... })) | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ... })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ... })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n }) | CalleeFlexibleAccessPath | res.send | | autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n }) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7272,6 +68597,16 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n }) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n }) | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n }) | receiverName | res | +| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n }) | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n ... )\\n } | CalleeFlexibleAccessPath | data.compiledMixed | | autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n ... )\\n } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n ... )\\n } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7280,6 +68615,21 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n ... )\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n ... )\\n } | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n ... )\\n } | receiverName | data | +| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | CalleeFlexibleAccessPath | data.compiledMixed | | autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | InputAccessPathFromCallee | 0.prefix | | autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | InputArgumentIndex | 0 | @@ -7289,6 +68639,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | | autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | CalleeFlexibleAccessPath | data.compiledMixed | | autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | InputAccessPathFromCallee | 0.path | | autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | InputArgumentIndex | 0 | @@ -7298,6 +68673,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | | autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | enclosingFunctionBody | req res res send data compiledMixed prefix >>> path req params path | +| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:1:47:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:1:47:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:1:47:3 | app | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:1:47:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:1:47:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:1:47:7 | app.get | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | app.get ... }));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | app.get ... }));\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | exceptional return of app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | exceptional return of app.get ... }));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | exceptional return of app.get ... }));\\n}) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:5:47:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:5:47:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:5:47:7 | get | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | calleeImports | express | @@ -7305,6 +68705,26 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ... }));\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ... }));\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ... }));\\n} | calleeImports | express | @@ -7312,6 +68732,66 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ... }));\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ... }));\\n} | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ... }));\\n} | receiverName | app | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ... })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ... })) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ... })) | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ... })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ... })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ... })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ... })) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ... })) | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ... })) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ... })) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n }) | CalleeFlexibleAccessPath | res.send | | autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n }) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7320,6 +68800,16 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n }) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n }) | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n }) | receiverName | res | +| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n }) | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n }) | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n ... "\\n } | CalleeFlexibleAccessPath | data.compiledMixed | | autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n ... "\\n } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n ... "\\n } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | @@ -7328,6 +68818,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n ... "\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n ... "\\n } | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n ... "\\n } | receiverName | data | +| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | CalleeFlexibleAccessPath | data.compiledMixed | | autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | InputAccessPathFromCallee | 0.prefix | | autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | InputArgumentIndex | 0 | @@ -7337,6 +68852,31 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | | autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | fileImports | express fs handlebars | +| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | fileImports | express fs handlebars | | autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | CalleeFlexibleAccessPath | data.compiledMixed | | autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | InputAccessPathFromCallee | 0.path | | autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | InputArgumentIndex | 0 | @@ -7346,24 +68886,238 @@ tokenFeatures | autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt | | autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | fileImports | express fs handlebars | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:0 | this | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | fs | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | module | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | module | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | require | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs = require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs = require('fs') | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:18 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:18 | require | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | exceptional return of require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | exceptional return of require('fs') | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | require('fs') | fileImports | bluebird fs | | autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | calleeImports | | | autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | contextFunctionInterfaces | | | autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:17 | {promisify} | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:17 | {promisify} | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:17 | {promisify} | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | {promis ... ebird') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | {promis ... ebird') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | {promis ... ebird') | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:27 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:27 | require | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | exceptional return of require('bluebird') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | exceptional return of require('bluebird') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | exceptional return of require('bluebird') | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | require('bluebird') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | require('bluebird') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | require('bluebird') | fileImports | bluebird fs | | autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | calleeImports | | | autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | contextFunctionInterfaces | | | autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:4:13 | methods | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:4:13 | methods | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:4:13 | methods | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods ... Sync'\\n] | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods ... Sync'\\n] | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods ... Sync'\\n] | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:4:17:9:1 | [\\n 're ... Sync'\\n] | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:17:9:1 | [\\n 're ... Sync'\\n] | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:4:17:9:1 | [\\n 're ... Sync'\\n] | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:6 | module | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:6 | module | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:14 | module.exports | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:14 | module.exports | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:14:6 | module. ... \\n}, {}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:14:6 | module. ... \\n}, {}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:1:14:6 | module. ... \\n}, {}) | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:8:11:14 | exports | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:8:11:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:8:11:14 | exports | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:24 | methods | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:24 | methods | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:24 | methods | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:31 | methods.reduce | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:31 | methods.reduce | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:31 | methods.reduce | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | exceptional return of methods ... \\n}, {}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | exceptional return of methods ... \\n}, {}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | exceptional return of methods ... \\n}, {}) | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | assignedToPropName | exports | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:26:11:31 | reduce | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:26:11:31 | reduce | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:26:11:31 | reduce | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | fileImports | bluebird fs | | autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ... obj;\\n} | CalleeFlexibleAccessPath | methods.reduce | | autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ... obj;\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ... obj;\\n} | contextFunctionInterfaces | | | autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ... obj;\\n} | contextSurroundingFunctionParameters | (obj, method) | | autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ... obj;\\n} | fileImports | bluebird fs | | autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ... obj;\\n} | receiverName | methods | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | fileImports | bluebird fs | | autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | CalleeFlexibleAccessPath | promisify | | autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | calleeImports | bluebird | @@ -7372,12 +69126,103 @@ tokenFeatures | autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | enclosingFunctionBody | obj method obj method promisify fs method obj | | autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | enclosingFunctionName | methods.reduce#functionalargument | | autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | fileImports | bluebird fs | +| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | contextSurroundingFunctionParameters | (obj, method) | +| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj | +| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | enclosingFunctionName | methods.reduce#functionalargument | +| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | fileImports | bluebird fs | | autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | CalleeFlexibleAccessPath | methods.reduce | | autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | contextFunctionInterfaces | | | autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | fileImports | bluebird fs | | autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | receiverName | methods | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | this | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | this | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | exports | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | exports | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | exports | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | require | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | require | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:7 | exports | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:7 | exports | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:7 | exports | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:15 | exports.require | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:15 | exports.require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:1:1:15 | exports.require | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:1:7:1 | exports ... );\\n\\t}\\n} | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:1:7:1 | exports ... );\\n\\t}\\n} | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:1:7:1 | exports ... );\\n\\t}\\n} | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:9:1:15 | require | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:9:1:15 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:9:1:15 | require | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | assignedToPropName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | fileImports | fs original-fs | | autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | calleeImports | | @@ -7386,6 +69231,21 @@ tokenFeatures | autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | enclosingFunctionBody | special special require fs require original-fs | | autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | enclosingFunctionName | require | | autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | fileImports | fs original-fs | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | contextFunctionInterfaces | require(special) | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | enclosingFunctionName | require | +| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | fileImports | fs original-fs | | autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | calleeImports | | @@ -7394,36 +69254,179 @@ tokenFeatures | autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | enclosingFunctionBody | special special require fs require original-fs | | autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | enclosingFunctionName | require | | autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | fileImports | fs original-fs | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:0 | this | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:0 | this | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | isPathInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathIsInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | rootPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | slash | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs = require('fs') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:16 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:16 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | exceptional return of require('fs') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | require('fs') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | require('fs') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | calleeImports | | | autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:11 | express | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:11 | express | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express ... press') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express ... press') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:21 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:21 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | exceptional return of require('express') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | exceptional return of require('express') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | require('express') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | require('express') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | calleeImports | | | autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:7 | url | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:7 | url | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:24 | url = require('url') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:17 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:17 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | exceptional return of require('url') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | require('url') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | require('url') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | calleeImports | | | autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:12 | sanitize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:12 | sanitize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:43 | sanitiz ... ename') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:22 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:22 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | exceptional return of require ... ename') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | require ... ename') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | require ... ename') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | calleeImports | | | autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathMod ... 'path') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:24 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:24 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | exceptional return of require('path') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | require('path') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | require('path') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | calleeImports | | | autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:7 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:7 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app = express() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app = express() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:17 | express | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:17 | express | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | exceptional return of express() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | express() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | express() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:5:10:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:5:10:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:5:10:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | calleeImports | express | @@ -7431,6 +69434,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -7438,6 +69456,96 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path = ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path = ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path = ... ry.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path = ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | calleeImports | fs | @@ -7447,6 +69555,37 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | stringConcatenatedWith | -endpoint- path | | autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | calleeImports | fs | @@ -7456,6 +69595,43 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | stringConcatenatedWith | './' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | stringConcatenatedWith | -endpoint- '/index.html' | | autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | calleeImports | fs | @@ -7465,6 +69641,52 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | stringConcatenatedWith | path -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | calleeImports | fs | @@ -7474,6 +69696,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | calleeImports | path | @@ -7492,6 +69719,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ... path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ... path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ... path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | calleeImports | fs | @@ -7501,6 +69768,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | calleeImports | path | @@ -7519,6 +69791,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:5:20:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:5:20:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:5:20:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | calleeImports | express | @@ -7526,6 +69813,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -7533,11 +69835,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | | autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | calleeImports | path | @@ -7547,6 +69919,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | calleeImports | fs | @@ -7556,6 +69963,37 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | stringConcatenatedWith | -endpoint- path | | autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | calleeImports | fs | @@ -7565,6 +70003,43 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | stringConcatenatedWith | './' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | stringConcatenatedWith | -endpoint- '/index.html' | | autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | calleeImports | fs | @@ -7574,6 +70049,52 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | stringConcatenatedWith | path -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | calleeImports | fs | @@ -7583,6 +70104,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | calleeImports | path | @@ -7601,6 +70127,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ... path)) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ... path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ... path)) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | calleeImports | fs | @@ -7610,6 +70176,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | calleeImports | path | @@ -7628,6 +70199,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:5:30:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:5:30:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:5:30:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | calleeImports | express | @@ -7635,6 +70221,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -7642,11 +70243,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | calleeImports | path | @@ -7656,6 +70327,66 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | calleeImports | fs | @@ -7665,6 +70396,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | calleeImports | path | @@ -7674,6 +70435,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | calleeImports | fs | @@ -7683,6 +70469,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | calleeImports | fs | @@ -7692,6 +70503,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | calleeImports | path | @@ -7701,6 +70542,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | calleeImports | fs | @@ -7710,6 +70576,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | calleeImports | path | @@ -7719,6 +70615,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | calleeImports | fs | @@ -7728,6 +70649,42 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | stringConcatenatedWith | -endpoint- pathModule.sep | | autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." + ... ule.sep | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." + ... ule.sep | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." + ... ule.sep | calleeImports | path | @@ -7737,6 +70694,47 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." + ... ule.sep | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." + ... ule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." + ... ule.sep | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | stringConcatenatedWith | '..' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | calleeImports | fs | @@ -7746,6 +70744,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:5:53:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:5:53:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:5:53:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | calleeImports | express | @@ -7753,6 +70766,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -7760,11 +70788,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | calleeImports | path | @@ -7774,6 +70872,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | calleeImports | path | @@ -7783,6 +70916,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | calleeImports | fs | @@ -7792,6 +70950,37 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | stringConcatenatedWith | -endpoint- path | | autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | calleeImports | fs | @@ -7801,6 +70990,43 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | stringConcatenatedWith | './' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | stringConcatenatedWith | -endpoint- '/index.html' | | autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | calleeImports | fs | @@ -7810,6 +71036,67 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | stringConcatenatedWith | path -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | calleeImports | fs | @@ -7819,6 +71106,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | calleeImports | fs | @@ -7828,6 +71140,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:5:71:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:5:71:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:5:71:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | calleeImports | express | @@ -7835,6 +71162,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -7842,11 +71184,77 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | stringConcatenatedWith | -endpoint- req.query.path | | autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' + ... ry.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' + ... ry.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' + ... ry.path | calleeImports | path | @@ -7856,6 +71264,62 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' + ... ry.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' + ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' + ... ry.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | stringConcatenatedWith | './' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | calleeImports | path | @@ -7865,6 +71329,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | calleeImports | fs | @@ -7874,6 +71363,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | calleeImports | fs | @@ -7883,6 +71397,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | app.get ... ../'\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | app.get ... ../'\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | app.get ... ../'\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | exceptional return of app.get ... ../'\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | exceptional return of app.get ... ../'\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | exceptional return of app.get ... ../'\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:5:81:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:5:81:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:5:81:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | calleeImports | express | @@ -7890,6 +71419,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | calleeImports | express | @@ -7897,6 +71441,146 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path = ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path = ... ry.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path = ... ry.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path = ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -7905,6 +71589,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | calleeImports | fs | @@ -7914,6 +71603,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -7922,6 +71636,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -7930,6 +71684,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | calleeImports | fs | @@ -7939,6 +71698,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:5:93:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:5:93:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:5:93:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | calleeImports | express | @@ -7946,6 +71720,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -7953,11 +71742,86 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | calleeImports | path | @@ -7967,6 +71831,86 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -7975,6 +71919,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | calleeImports | fs | @@ -7984,6 +71933,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | calleeImports | path | @@ -7993,6 +71967,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8001,6 +72015,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | calleeImports | fs | @@ -8010,6 +72029,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:5:105:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:5:105:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:5:105:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | calleeImports | express | @@ -8017,6 +72051,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -8024,11 +72073,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | calleeImports | path | @@ -8038,6 +72157,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | calleeImports | path | @@ -8047,6 +72201,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | calleeImports | fs | @@ -8056,6 +72235,96 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | calleeImports | fs | @@ -8065,6 +72334,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:5:116:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:5:116:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:5:116:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | calleeImports | express | @@ -8072,6 +72356,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -8079,11 +72378,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path = ... y.path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | | autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | CalleeFlexibleAccessPath | fs.realpathSync | | autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | calleeImports | fs | @@ -8093,6 +72462,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | calleeImports | fs | @@ -8102,6 +72506,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | calleeImports | fs | @@ -8111,6 +72555,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | calleeImports | path | @@ -8129,6 +72578,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | calleeImports | fs | @@ -8138,6 +72612,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | calleeImports | fs | @@ -8147,6 +72646,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ... path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ... path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ... path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | calleeImports | fs | @@ -8156,6 +72695,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | calleeImports | path | @@ -8174,6 +72718,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ... path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ... path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ... path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ... path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ... path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ... path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | calleeImports | fs | @@ -8183,6 +72767,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path | +| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | calleeImports | path | @@ -8201,6 +72790,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:5:129:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:5:129:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:5:129:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | calleeImports | express | @@ -8208,6 +72812,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -8215,11 +72834,71 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | calleeImports | path | @@ -8229,6 +72908,16 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | calleeImports | path | @@ -8238,6 +72927,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | calleeImports | path | @@ -8247,6 +72976,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | calleeImports | fs | @@ -8256,6 +73010,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | calleeImports | fs | @@ -8265,6 +73044,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:5:138:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:5:138:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:5:138:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | calleeImports | express | @@ -8272,6 +73066,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -8279,11 +73088,71 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path = ... y.path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | calleeImports | path | @@ -8293,6 +73162,16 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | calleeImports | path | @@ -8302,6 +73181,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | calleeImports | path | @@ -8311,6 +73225,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | calleeImports | fs | @@ -8320,6 +73259,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | calleeImports | fs | @@ -8329,6 +73293,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:5:147:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:5:147:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:5:147:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | calleeImports | express | @@ -8336,6 +73315,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -8343,11 +73337,93 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path = ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | stringConcatenatedWith | -endpoint- pathModule.normalize() | | autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/' ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/' ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/' ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/' ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/' ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | stringConcatenatedWith | 'foo/' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | calleeImports | path | @@ -8357,6 +73433,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | calleeImports | | @@ -8366,6 +73482,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | calleeImports | fs | @@ -8375,6 +73516,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | calleeImports | fs | @@ -8384,6 +73550,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | CalleeFlexibleAccessPath | path.includes | | autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | calleeImports | | @@ -8393,6 +73589,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | calleeImports | fs | @@ -8402,6 +73623,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:5:159:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:5:159:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:5:159:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | calleeImports | express | @@ -8409,6 +73645,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -8416,11 +73667,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | calleeImports | path | @@ -8430,6 +73751,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | CalleeFlexibleAccessPath | path.includes | | autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | calleeImports | path | @@ -8439,6 +73795,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | calleeImports | fs | @@ -8448,6 +73829,61 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | calleeImports | fs | @@ -8457,6 +73893,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | calleeImports | fs | @@ -8466,6 +73927,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:5:173:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:5:173:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:5:173:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | calleeImports | express | @@ -8473,6 +73949,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -8480,6 +73971,131 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path = ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path = ... ry.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path = ... ry.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path = ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8488,6 +74104,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8496,6 +74147,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8504,6 +74190,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | calleeImports | fs | @@ -8513,6 +74234,56 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | calleeImports | fs | @@ -8522,6 +74293,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | calleeImports | fs | @@ -8531,6 +74327,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | CalleeFlexibleAccessPath | path.includes | | autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8539,6 +74360,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | calleeImports | fs | @@ -8548,6 +74394,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | calleeImports | fs | @@ -8557,6 +74428,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | CalleeFlexibleAccessPath | path.includes | | autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8565,6 +74471,61 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | calleeImports | fs | @@ -8574,6 +74535,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | calleeImports | fs | @@ -8583,6 +74569,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | calleeImports | path | @@ -8592,6 +74618,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | CalleeFlexibleAccessPath | normalizedPath.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | calleeImports | path | @@ -8601,6 +74652,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | receiverName | normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | calleeImports | fs | @@ -8610,6 +74686,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | calleeImports | fs | @@ -8619,6 +74720,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | CalleeFlexibleAccessPath | normalizedPath.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | calleeImports | path | @@ -8628,6 +74759,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | receiverName | normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | CalleeFlexibleAccessPath | normalizedPath.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | calleeImports | path | @@ -8637,6 +74793,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | receiverName | normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | calleeImports | fs | @@ -8646,6 +74827,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | calleeImports | fs | @@ -8655,6 +74861,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | app.get ... ized\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | app.get ... ized\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | app.get ... ized\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | exceptional return of app.get ... ized\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | exceptional return of app.get ... ized\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | exceptional return of app.get ... ized\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:5:213:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:5:213:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:5:213:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | calleeImports | express | @@ -8662,6 +74883,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | calleeImports | express | @@ -8669,11 +74905,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path = ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | calleeImports | path | @@ -8683,6 +74989,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | calleeImports | path | @@ -8692,6 +75073,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | calleeImports | fs | @@ -8701,11 +75107,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path = ... t(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path = ... t(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path = ... t(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path = ... t(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path = ... t(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | CalleeFlexibleAccessPath | decodeURIComponent | | autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8713,6 +75144,71 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | CalleeFlexibleAccessPath | path.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -8721,6 +75217,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | calleeImports | fs | @@ -8730,6 +75251,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | exceptional return of app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | exceptional return of app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | exceptional return of app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:5:225:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:5:225:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:5:225:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | calleeImports | express | @@ -8737,6 +75273,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n }\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n }\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n }\\n} | calleeImports | express | @@ -8744,11 +75295,96 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n }\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n }\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path = ... g, ' ') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path = ... g, ' ') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path = ... g, ' ') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path = ... g, ' ') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path = ... g, ' ') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | calleeImports | path | @@ -8758,6 +75394,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | CalleeFlexibleAccessPath | pathModule.normalize().replace | | autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | calleeImports | path | @@ -8774,6 +75425,61 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | calleeImports | fs | @@ -8783,11 +75489,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path = ... /g, '') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path = ... /g, '') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path = ... /g, '') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path = ... /g, '') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path = ... /g, '') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | CalleeFlexibleAccessPath | path.replace | | autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | calleeImports | path | @@ -8806,6 +75547,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | calleeImports | fs | @@ -8815,6 +75581,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | app.get ... rity\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | app.get ... rity\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | app.get ... rity\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | exceptional return of app.get ... rity\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | exceptional return of app.get ... rity\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | exceptional return of app.get ... rity\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:5:235:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:5:235:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:5:235:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | calleeImports | express | @@ -8822,6 +75603,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | calleeImports | express | @@ -8829,11 +75625,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path = ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | CalleeFlexibleAccessPath | pathModule.resolve | | autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | calleeImports | path | @@ -8843,6 +75709,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | calleeImports | fs | @@ -8852,6 +75753,66 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | CalleeFlexibleAccessPath | path.substring | | autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | calleeImports | path | @@ -8861,6 +75822,16 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | CalleeFlexibleAccessPath | path.substring | | autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | calleeImports | path | @@ -8870,6 +75841,56 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | calleeImports | fs | @@ -8879,6 +75900,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | calleeImports | fs | @@ -8888,6 +75934,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | CalleeFlexibleAccessPath | path.slice | | autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | calleeImports | path | @@ -8897,6 +75973,16 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | CalleeFlexibleAccessPath | path.slice | | autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | calleeImports | path | @@ -8906,6 +75992,56 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | calleeImports | fs | @@ -8915,6 +76051,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | calleeImports | fs | @@ -8924,6 +76085,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | exceptional return of app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | exceptional return of app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | exceptional return of app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:5:253:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:5:253:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:5:253:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | calleeImports | express | @@ -8931,6 +76107,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ... \\n }\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ... \\n }\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ... \\n }\\n} | calleeImports | express | @@ -8938,11 +76129,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ... \\n }\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ... \\n }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ... \\n }\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path = ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | | autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | CalleeFlexibleAccessPath | pathModule.resolve | | autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | calleeImports | path | @@ -8952,6 +76213,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | calleeImports | fs | @@ -8961,6 +76257,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | calleeImports | path | @@ -8970,6 +76341,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | calleeImports | path | @@ -8979,6 +76355,42 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | stringConcatenatedWith | -endpoint- pathModule.sep | | autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." + ... ule.sep | CalleeFlexibleAccessPath | relative.startsWith | | autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." + ... ule.sep | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." + ... ule.sep | calleeImports | path | @@ -8988,6 +76400,62 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." + ... ule.sep | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." + ... ule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." + ... ule.sep | receiverName | relative | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | stringConcatenatedWith | '..' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | calleeImports | fs | @@ -8997,6 +76465,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | calleeImports | fs | @@ -9006,6 +76499,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | calleeImports | path | @@ -9015,6 +76548,61 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | calleeImports | path | @@ -9024,6 +76612,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | calleeImports | path | @@ -9042,6 +76635,37 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | stringConcatenatedWith | -endpoint- pathModule.sep | | autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' + ... ule.sep | CalleeFlexibleAccessPath | relativePath.indexOf | | autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' + ... ule.sep | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' + ... ule.sep | calleeImports | path | @@ -9051,6 +76675,52 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' + ... ule.sep | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' + ... ule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' + ... ule.sep | receiverName | relativePath | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | stringConcatenatedWith | '..' -endpoint- | +| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | calleeImports | fs | @@ -9060,6 +76730,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | calleeImports | fs | @@ -9069,6 +76764,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | calleeImports | path | @@ -9078,6 +76813,61 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | calleeImports | path | @@ -9087,6 +76877,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | calleeImports | path | @@ -9105,6 +76900,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | CalleeFlexibleAccessPath | relativePath.indexOf | | autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | calleeImports | path | @@ -9114,6 +76934,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | receiverName | relativePath | +| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | calleeImports | fs | @@ -9123,6 +76973,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | calleeImports | fs | @@ -9132,6 +77007,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | calleeImports | path | @@ -9141,6 +77056,61 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | calleeImports | path | @@ -9150,6 +77120,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | calleeImports | path | @@ -9168,6 +77143,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | calleeImports | path | @@ -9177,6 +77192,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | CalleeFlexibleAccessPath | pathModule.normalize().indexOf | | autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | calleeImports | path | @@ -9185,6 +77205,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | | autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | calleeImports | fs | @@ -9194,6 +77244,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | calleeImports | fs | @@ -9203,6 +77278,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | calleeImports | path | @@ -9212,6 +77327,61 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative | | autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | calleeImports | path | @@ -9221,6 +77391,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | calleeImports | path | @@ -9239,6 +77414,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | calleeImports | path | @@ -9248,6 +77458,11 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | CalleeFlexibleAccessPath | pathModule.normalize().indexOf | | autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | calleeImports | path | @@ -9256,6 +77471,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | | autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | calleeImports | fs | @@ -9265,6 +77505,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath | +| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | calleeImports | fs | @@ -9274,18 +77539,71 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathI ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathI ... nside") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathI ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:26 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:26 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | exceptional return of require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | exceptional return of require ... nside") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | exceptional return of require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | require ... nside") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | calleeImports | | | autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsI ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsI ... nside") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsI ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:26 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:26 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:26 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | exceptional return of require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | exceptional return of require ... nside") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | exceptional return of require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | require ... nside") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | calleeImports | | | autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | app.get ... \\n\\t}\\n\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | app.get ... \\n\\t}\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | app.get ... \\n\\t}\\n\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | exceptional return of app.get ... \\n\\t}\\n\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | exceptional return of app.get ... \\n\\t}\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | exceptional return of app.get ... \\n\\t}\\n\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:5:302:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:5:302:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:5:302:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | calleeImports | express | @@ -9293,6 +77611,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | calleeImports | express | @@ -9300,6 +77643,96 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path = ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path = ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path = ... ry.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path = ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | calleeImports | fs | @@ -9309,6 +77742,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | calleeImports | fs | @@ -9318,6 +77791,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | calleeImports | fs | @@ -9327,6 +77825,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | CalleeFlexibleAccessPath | pathIsInside | | autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | calleeImports | path-is-inside | @@ -9343,6 +77856,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | | autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | calleeImports | fs | @@ -9352,6 +77890,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | calleeImports | fs | @@ -9361,6 +77924,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | calleeImports | path | @@ -9379,6 +77982,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | CalleeFlexibleAccessPath | pathIsInside | | autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | calleeImports | path-is-inside | @@ -9395,6 +78013,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | | autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | calleeImports | fs | @@ -9404,6 +78047,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | calleeImports | fs | @@ -9413,6 +78081,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | CalleeFlexibleAccessPath | pathIsInside | | autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | calleeImports | path-is-inside | @@ -9429,6 +78112,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | | autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | calleeImports | fs | @@ -9438,6 +78146,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath | +| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | calleeImports | fs | @@ -9447,6 +78180,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:5:338:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:5:338:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:5:338:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | calleeImports | express | @@ -9454,6 +78202,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | calleeImports | express | @@ -9461,11 +78224,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path = ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path = ... y.path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path = ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path = ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path = ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | CalleeFlexibleAccessPath | pathModule.resolve | | autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | calleeImports | path | @@ -9475,6 +78308,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | calleeImports | fs | @@ -9484,6 +78352,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | CalleeFlexibleAccessPath | pathModule.resolve | | autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | calleeImports | path | @@ -9493,6 +78401,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | CalleeFlexibleAccessPath | abs.indexOf | | autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | calleeImports | path | @@ -9502,6 +78435,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | receiverName | abs | +| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | calleeImports | fs | @@ -9511,6 +78474,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | calleeImports | fs | @@ -9520,6 +78508,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPat ... s.cwd() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPat ... s.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPat ... s.cwd() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:22 | process | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:22 | process | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:22 | process | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:26 | process.cwd | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:26 | process.cwd | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:26 | process.cwd | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | exceptional return of process.cwd() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | exceptional return of process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | exceptional return of process.cwd() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | process.cwd() | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | process.cwd() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:352:24:352:26 | cwd | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:352:24:352:26 | cwd | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:352:24:352:26 | cwd | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | exceptional return of app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | exceptional return of app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | exceptional return of app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:5:353:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:5:353:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:5:353:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | calleeImports | express | @@ -9527,6 +78555,26 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n }\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n }\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n }\\n} | calleeImports | express | @@ -9534,6 +78582,96 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n }\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n }\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path = ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path = ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path = ... ry.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path = ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | calleeImports | fs | @@ -9543,6 +78681,46 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | CalleeFlexibleAccessPath | pathModule.join | | autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | calleeImports | path | @@ -9561,6 +78739,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | CalleeFlexibleAccessPath | allowPath | | autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -9575,6 +78783,51 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | | autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | calleeImports | fs | @@ -9584,6 +78837,51 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | calleeImports | fs | @@ -9593,6 +78891,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | calleeImports | fs | @@ -9602,6 +78930,86 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ... 0;\\n } | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ... 0;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ... 0;\\n } | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ... 0;\\n } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ... 0;\\n } | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | CalleeFlexibleAccessPath | requestPath.indexOf | | autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) | @@ -9610,6 +79018,42 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | receiverName | requestPath | +| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | contextSurroundingFunctionParameters | (requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 | +| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:375:1:375:26 | import ... slash'; | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:375:1:375:26 | import ... slash'; | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:375:1:375:26 | import ... slash'; | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:375:19:375:25 | 'slash' | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:375:19:375:25 | 'slash' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:375:19:375:25 | 'slash' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:5:376:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:5:376:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:5:376:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | calleeImports | express | @@ -9617,6 +79061,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | calleeImports | express | @@ -9624,6 +79083,96 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path = ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path = ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path = ... ry.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path = ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | calleeImports | fs | @@ -9633,6 +79182,41 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | calleeImports | fs | @@ -9650,6 +79234,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path | | autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | exceptional return of app.get ... \\n }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | exceptional return of app.get ... \\n }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | exceptional return of app.get ... \\n }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:5:384:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:5:384:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:5:384:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | calleeImports | express | @@ -9657,6 +79256,21 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n }\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n }\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n }\\n} | calleeImports | express | @@ -9664,11 +79278,81 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n }\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n }\\n} | receiverName | app | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path = ... uery.x) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path = ... uery.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path = ... uery.x) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path = ... uery.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path = ... uery.x) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | | autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | | autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | CalleeFlexibleAccessPath | pathModule.normalize | | autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | calleeImports | path | @@ -9678,6 +79362,66 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | receiverName | pathModule | +| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | calleeImports | fs | @@ -9687,6 +79431,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | CalleeFlexibleAccessPath | path.match | | autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | calleeImports | path | @@ -9696,6 +79470,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | calleeImports | fs | @@ -9705,6 +79504,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | CalleeFlexibleAccessPath | path.match | | autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | calleeImports | path | @@ -9714,6 +79543,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | calleeImports | fs | @@ -9723,6 +79577,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | CalleeFlexibleAccessPath | path.match | | autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | calleeImports | path | @@ -9732,6 +79616,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | calleeImports | fs | @@ -9741,6 +79650,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | CalleeFlexibleAccessPath | path.match | | autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | calleeImports | path | @@ -9750,6 +79689,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | calleeImports | fs | @@ -9759,6 +79723,36 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | receiverName | fs | +| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | CalleeFlexibleAccessPath | path.match | | autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | calleeImports | path | @@ -9768,6 +79762,31 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | receiverName | path | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | +| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) | +| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path | +| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | calleeImports | fs | @@ -9777,42 +79796,260 @@ tokenFeatures | autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url | | autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | receiverName | fs | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | this | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | asyncFS | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | asyncFS | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fsExtra | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fsExtra | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | getFsModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | gracefulFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | gracefulFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | mkdirp | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | mkdirp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | originalFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | originalFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | util | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | util | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:8 | http | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:8 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http = ... "http") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http = ... "http") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http = ... "http") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:18 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | exceptional return of require("http") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | exceptional return of require("http") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | exceptional return of require("http") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | require("http") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | require("http") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | require("http") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url = require("url") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url = require("url") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url = require("url") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:15 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:15 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:15 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | exceptional return of require("url") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | exceptional return of require("url") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | exceptional return of require("url") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | require("url") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | require("url") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | require("url") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs = require("fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs = require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs = require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:14 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:14 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:14 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | exceptional return of require("fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | exceptional return of require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | exceptional return of require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | require("fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefu ... ul-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefu ... ul-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefu ... ul-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefulFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefulFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:22 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:22 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | exceptional return of require ... ul-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | exceptional return of require ... ul-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | exceptional return of require ... ul-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | require ... ul-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | require ... ul-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | require ... ul-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra ... extra") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra ... extra") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra ... extra") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:19 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:19 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:19 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | exceptional return of require("fs-extra") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | exceptional return of require("fs-extra") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | exceptional return of require("fs-extra") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | require("fs-extra") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | require("fs-extra") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | require("fs-extra") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | origina ... al-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | origina ... al-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | origina ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | originalFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | originalFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:22 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:22 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | exceptional return of require ... al-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | exceptional return of require ... al-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | exceptional return of require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | require ... al-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | require ... al-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:5:8:10 | server | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:5:8:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:5:8:10 | server | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:5:25:2 | server ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:5:25:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:5:25:2 | server ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:17 | http | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:17 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:30 | http.createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:30 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:19:8:30 | createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:19:8:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:19:8:30 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | calleeImports | http | @@ -9820,6 +80057,81 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path = ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path = ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | calleeImports | url | @@ -9829,6 +80141,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | calleeImports | url | @@ -9838,6 +80155,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | calleeImports | fs | @@ -9847,6 +80199,31 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | receiverName | fs | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | CalleeFlexibleAccessPath | gracefulFs.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | calleeImports | graceful-fs | @@ -9856,6 +80233,31 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | receiverName | gracefulFs | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | CalleeFlexibleAccessPath | fsExtra.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | calleeImports | fs-extra | @@ -9865,6 +80267,31 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | receiverName | fsExtra | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | CalleeFlexibleAccessPath | originalFs.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | calleeImports | original-fs | @@ -9874,6 +80301,48 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | receiverName | originalFs | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | CalleeFlexibleAccessPath | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | InputArgumentIndex | 0 | +| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | CalleeFlexibleAccessPath | getFsModule().readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | contextFunctionInterfaces | getFsModule(special) | @@ -9881,6 +80350,48 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | CalleeFlexibleAccessPath | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | InputArgumentIndex | 0 | +| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | CalleeFlexibleAccessPath | getFsModule().readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | contextFunctionInterfaces | getFsModule(special) | @@ -9888,6 +80399,51 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | calleeImports | | @@ -9896,6 +80452,24 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | CalleeFlexibleAccessPath | import("p").require | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | InputArgumentIndex | 0 | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | calleeImports | ./my-fs-module | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | CalleeFlexibleAccessPath | import("p").require().readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | calleeImports | ./my-fs-module | @@ -9904,6 +80478,51 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ... : "fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ... : "fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ... : "fs" | calleeImports | | @@ -9912,6 +80531,51 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ... : "fs" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ... : "fs" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ... : "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | CalleeFlexibleAccessPath | flexibleModuleName.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | calleeImports | | @@ -9921,6 +80585,71 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | receiverName | flexibleModuleName | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | functio ... ;\\n }\\n} | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | functio ... ;\\n }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | functio ... ;\\n }\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | calleeImports | | @@ -9929,6 +80658,21 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | enclosingFunctionBody | special special require fs require original-fs | | autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | enclosingFunctionName | getFsModule | | autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | contextSurroundingFunctionParameters | (special) | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | enclosingFunctionName | getFsModule | +| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | calleeImports | | @@ -9937,12 +80681,81 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | enclosingFunctionBody | special special require fs require original-fs | | autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | enclosingFunctionName | getFsModule | | autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util = ... "util") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util = ... "util") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util = ... "util") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:18 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | exceptional return of require("util") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | exceptional return of require("util") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | exceptional return of require("util") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | require("util") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | require("util") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | require("util") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:4 | http | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:4 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:17 | http.createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:17 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:6:37:17 | createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:6:37:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:6:37:17 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | calleeImports | http | @@ -9950,6 +80763,81 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path = ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path = ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | calleeImports | url | @@ -9959,6 +80847,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | calleeImports | url | @@ -9968,6 +80861,56 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | CalleeFlexibleAccessPath | util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | calleeImports | util | @@ -9977,6 +80920,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | receiverName | util | +| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | CalleeFlexibleAccessPath | util.promisify() | | autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | calleeImports | util | @@ -9985,6 +80933,46 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | calleeImports | | @@ -9993,6 +80981,16 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | CalleeFlexibleAccessPath | import(!).promisify | | autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | calleeImports | bluebird | @@ -10001,6 +80999,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | CalleeFlexibleAccessPath | import(!).promisify() | | autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | calleeImports | bluebird | @@ -10009,6 +81012,51 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | calleeImports | | @@ -10017,6 +81065,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | CalleeFlexibleAccessPath | import(!).promisifyAll | | autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | calleeImports | bluebird | @@ -10025,6 +81078,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | +| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | CalleeFlexibleAccessPath | import(!).promisifyAll().readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | calleeImports | bluebird | @@ -10033,12 +81091,81 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path | | autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS ... odule") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS ... odule") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:23 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:23 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | exceptional return of require ... odule") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | exceptional return of require ... odule") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | exceptional return of require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | require ... odule") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | require ... odule") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:4 | http | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:4 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:17 | http.createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:17 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:6:48:17 | createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:6:48:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:6:48:17 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | calleeImports | http | @@ -10046,6 +81173,81 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path = ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path = ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | calleeImports | url | @@ -10055,6 +81257,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | calleeImports | url | @@ -10064,6 +81271,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | calleeImports | fs | @@ -10073,6 +81315,31 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | receiverName | fs | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | CalleeFlexibleAccessPath | asyncFS.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | calleeImports | ./my-async-fs-module | @@ -10082,6 +81349,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | receiverName | asyncFS | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | calleeImports | | @@ -10090,6 +81392,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | CalleeFlexibleAccessPath | import(!) | | autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | calleeImports | pify | @@ -10098,6 +81405,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | CalleeFlexibleAccessPath | import(!)() | | autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | calleeImports | pify | @@ -10106,6 +81418,46 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | calleeImports | | @@ -10122,6 +81474,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | CalleeFlexibleAccessPath | import(!)().readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | calleeImports | pify | @@ -10130,6 +81487,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | calleeImports | | @@ -10138,6 +81530,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | CalleeFlexibleAccessPath | import(!) | | autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | calleeImports | util.promisify | @@ -10146,6 +81543,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | CalleeFlexibleAccessPath | import(!)() | | autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | calleeImports | util.promisify | @@ -10154,6 +81556,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | calleeImports | | @@ -10162,6 +81599,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | CalleeFlexibleAccessPath | import(!) | | autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | calleeImports | thenify | @@ -10170,6 +81612,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | CalleeFlexibleAccessPath | import(!)() | | autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | calleeImports | thenify | @@ -10178,6 +81625,36 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | calleeImports | | @@ -10186,6 +81663,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ... path}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ... path}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ... path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ... path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ... path}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ... path}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ... path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ... path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ... path}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ... path}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ... path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ... path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | CalleeFlexibleAccessPath | readPkg.readPackageSync | | autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | calleeImports | read-pkg | @@ -10195,6 +81707,21 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | receiverName | readPkg | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | CalleeFlexibleAccessPath | readPkg.readPackageSync | | autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | InputAccessPathFromCallee | 0.cwd | | autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | InputArgumentIndex | 0 | @@ -10205,6 +81732,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ... path}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ... path}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ... path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ... path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ... path}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ... path}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ... path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ... path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ... path}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ... path}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ... path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ... path}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ... path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | CalleeFlexibleAccessPath | readPkg.readPackageAsync | | autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | calleeImports | read-pkg | @@ -10214,6 +81776,21 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | receiverName | readPkg | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | CalleeFlexibleAccessPath | readPkg.readPackageAsync | | autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | InputAccessPathFromCallee | 0.cwd | | autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | InputArgumentIndex | 0 | @@ -10224,12 +81801,76 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path | | autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp ... kdirp") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp ... kdirp") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp ... kdirp") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:22 | require | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:22 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | exceptional return of require("mkdirp") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | exceptional return of require("mkdirp") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | exceptional return of require("mkdirp") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | require("mkdirp") | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | require("mkdirp") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | require("mkdirp") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | calleeImports | | | autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | contextFunctionInterfaces | getFsModule(special) | | autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:4 | http | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:4 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:4 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:17 | http.createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:17 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:17 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:6:67:17 | createServer | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:6:67:17 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:6:67:17 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | calleeImports | http | @@ -10237,6 +81878,81 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path = ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path = ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | calleeImports | url | @@ -10246,6 +81962,11 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | calleeImports | url | @@ -10255,6 +81976,41 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | receiverName | url | +| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | calleeImports | fs | @@ -10264,6 +82020,21 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | receiverName | fs | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | CalleeFlexibleAccessPath | mkdirp | | autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | calleeImports | mkdirp | @@ -10272,6 +82043,31 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | | autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | +| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | contextFunctionInterfaces | getFsModule(special) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path | +| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | CalleeFlexibleAccessPath | mkdirp.sync | | autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | calleeImports | mkdirp | @@ -10281,18 +82077,97 @@ tokenFeatures | autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify | | autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | receiverName | mkdirp | +| autogenerated/TaintedPath/prettier.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:1:1:0 | this | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:1:1:1 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:1:1:1 | prettier | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:1:1:1 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:1:1:1 | require | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:7:1:13 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:7:1:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:7:1:13 | express | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express ... press') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express ... press') | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:17:1:23 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:17:1:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:17:1:23 | require | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:17:1:34 | exceptional return of require('express') | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:1:17:1:34 | require('express') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:1:17:1:34 | require('express') | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | calleeImports | | | autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | contextFunctionInterfaces | | | autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettie ... ttier") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettie ... ttier") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettie ... ttier") | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettier | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:2:18:2:24 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:2:18:2:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:2:18:2:24 | require | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:2:18:2:36 | exceptional return of require("prettier") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:2:18:2:36 | exceptional return of require("prettier") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:2:18:2:36 | exceptional return of require("prettier") | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:2:18:2:36 | require("prettier") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:2:18:2:36 | require("prettier") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:2:18:2:36 | require("prettier") | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | calleeImports | | | autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | contextFunctionInterfaces | | | autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:4:7:4:9 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:4:7:4:9 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:4:7:4:9 | app | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app = express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app = express() | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:4:13:4:19 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:4:13:4:19 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:4:13:4:19 | express | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:4:13:4:21 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:4:13:4:21 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:4:13:4:21 | exceptional return of express() | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:4:13:4:21 | express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:4:13:4:21 | express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:4:13:4:21 | express() | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:1:5:3 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:1:5:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:1:5:3 | app | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:1:5:7 | app.get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:1:5:7 | app.get | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:1:14:2 | app.get ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:1:14:2 | app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:1:14:2 | app.get ... });\\n}) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:1:14:2 | exceptional return of app.get ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:1:14:2 | exceptional return of app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:1:14:2 | exceptional return of app.get ... });\\n}) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:5:5:7 | get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:5:5:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:5:5:7 | get | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | calleeImports | express | @@ -10300,6 +82175,26 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | receiverName | app | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ... });\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ... });\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ... });\\n} | calleeImports | express | @@ -10307,6 +82202,116 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ... });\\n} | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ... });\\n} | receiverName | app | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n }) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n }) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | CalleeFlexibleAccessPath | prettier.resolveConfig | | autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | calleeImports | prettier | @@ -10316,6 +82321,21 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | receiverName | prettier | +| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n } | CalleeFlexibleAccessPath | prettier.resolveConfig().then | | autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n } | calleeImports | prettier | @@ -10324,6 +82344,61 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n } | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | | autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n } | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | CalleeFlexibleAccessPath | prettier.format | | autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | calleeImports | prettier | @@ -10342,6 +82417,46 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | receiverName | prettier | +| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n }) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n }) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | CalleeFlexibleAccessPath | prettier.resolveConfig | | autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | calleeImports | prettier | @@ -10360,6 +82475,21 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | receiverName | prettier | +| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | CalleeFlexibleAccessPath | prettier.resolveConfig | | autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | InputAccessPathFromCallee | 1.config | | autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | InputArgumentIndex | 1 | @@ -10370,6 +82500,21 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | | autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n } | CalleeFlexibleAccessPath | prettier.resolveConfig().then | | autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n } | calleeImports | prettier | @@ -10378,6 +82523,61 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n } | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | | autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n } | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | fileImports | express prettier | +| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | contextFunctionInterfaces | | +| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | contextSurroundingFunctionParameters | (req, res)\n(options) | +| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options | +| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | CalleeFlexibleAccessPath | prettier.format | | autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | calleeImports | prettier | @@ -10396,18 +82596,157 @@ tokenFeatures | autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | fileImports | express prettier | | autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | receiverName | prettier | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:0 | this | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | parseTorrent | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | puppeteer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | puppeteer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | puppeteer | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | require | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppete ... eteer') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppete ... eteer') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppete ... eteer') | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppeteer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppeteer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppeteer | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:25 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:25 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:25 | require | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | exceptional return of require('puppeteer') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | exceptional return of require('puppeteer') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | exceptional return of require('puppeteer') | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | require('puppeteer') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | require('puppeteer') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | require('puppeteer') | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | calleeImports | | | autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | contextFunctionInterfaces | | | autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTo ... rrent') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTo ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTo ... rrent') | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTorrent | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:28 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:28 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:28 | require | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | exceptional return of require ... rrent') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | exceptional return of require ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | exceptional return of require ... rrent') | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | require ... rrent') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | require ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | require ... rrent') | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | calleeImports | | | autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | contextFunctionInterfaces | | | autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:2 | (async ... e();\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:2 | (async ... e();\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:2 | (async ... e();\\n}) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | (async ... );\\n})() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | (async ... );\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | (async ... );\\n})() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | exceptional return of (async ... );\\n})() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | exceptional return of (async ... );\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | exceptional return of (async ... );\\n})() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | async ( ... se();\\n} | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | async ( ... se();\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | async ( ... se();\\n} | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | stringConcatenatedWith | -endpoint- parseTorrent().name + '.torrent.data' | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/" ... t).name | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/" ... t).name | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/" ... t).name | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/" ... t).name | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/" ... t).name | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/" ... t.data" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/" ... t.data" | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/" ... t.data" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/" ... t.data" | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/" ... t.data" | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | stringConcatenatedWith | 'dir/' -endpoint- '.torrent.data' | | autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | CalleeFlexibleAccessPath | parseTorrent | | autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | InputArgumentIndex | 0 | | autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | calleeImports | parse-torrent | @@ -10416,6 +82755,137 @@ tokenFeatures | autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | | autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | enclosingFunctionName | | | autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | stringConcatenatedWith | 'dir/' + parseTorrent().name -endpoint- | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page = ... wPage() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page = ... wPage() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page = ... wPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page = ... wPage() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page = ... wPage() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ... 'a4' } | CalleeFlexibleAccessPath | page.pdf | | autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ... 'a4' } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ... 'a4' } | calleeImports | puppeteer | @@ -10425,6 +82895,21 @@ tokenFeatures | autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ... 'a4' } | enclosingFunctionName | | | autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ... 'a4' } | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ... 'a4' } | receiverName | page | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | CalleeFlexibleAccessPath | page.pdf | | autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | InputAccessPathFromCallee | 0.path | | autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | InputArgumentIndex | 0 | @@ -10435,6 +82920,21 @@ tokenFeatures | autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | | autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | enclosingFunctionName | | | autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | CalleeFlexibleAccessPath | page.pdf | | autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | InputAccessPathFromCallee | 0.format | | autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | InputArgumentIndex | 0 | @@ -10445,6 +82945,151 @@ tokenFeatures | autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | | autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | enclosingFunctionName | | | autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | CalleeFlexibleAccessPath | pages.?.screenshot | | autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | InputArgumentIndex | 0 | | autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | calleeImports | puppeteer | @@ -10453,6 +83098,21 @@ tokenFeatures | autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | | autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | enclosingFunctionName | | | autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | fileImports | parse-torrent puppeteer | | autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | CalleeFlexibleAccessPath | pages.?.screenshot | | autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | InputAccessPathFromCallee | 0.path | | autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | InputArgumentIndex | 0 | @@ -10463,24 +83123,177 @@ tokenFeatures | autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | | autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | enclosingFunctionName | | | autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | contextFunctionInterfaces | | +| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | contextSurroundingFunctionParameters | () | +| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close | +| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | enclosingFunctionName | | +| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | fileImports | parse-torrent puppeteer | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:0 | this | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | chownr | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | chownr | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | chownr | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | nodefs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | nodefs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | nodefs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | require | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs = require('fs') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:16 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:16 | require | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | exceptional return of require('fs') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | require('fs') | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | calleeImports | | | autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:8 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:8 | http | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http = ... 'http') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:18 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:18 | require | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | exceptional return of require('http') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | require('http') | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | calleeImports | | | autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url = require('url') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:17 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:17 | require | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | exceptional return of require('url') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | require('url') | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | calleeImports | | | autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:5:10 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:5:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:5:10 | server | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:17 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:17 | http | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:30 | http.createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:30 | http.createServer | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:19:5:30 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:19:5:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:19:5:30 | createServer | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | calleeImports | http | @@ -10488,6 +83301,81 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path = ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path = ... ry.path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | calleeImports | url | @@ -10497,6 +83385,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | calleeImports | url | @@ -10506,6 +83399,41 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | receiverName | url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | calleeImports | fs | @@ -10515,6 +83443,81 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ... : path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ... : path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ... : path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ... : path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ... : path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ... : path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ... : path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ... : path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ... : path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ... : path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | calleeImports | fs | @@ -10524,6 +83527,67 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | assignedToPropName | sub | +| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | calleeImports | fs | @@ -10533,6 +83597,82 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | assignedToPropName | sub2 | +| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | calleeImports | fs | @@ -10542,6 +83682,82 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | assignedToPropName | sub3 | +| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | calleeImports | fs | @@ -10551,6 +83767,67 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | assignedToPropName | sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | calleeImports | fs | @@ -10560,6 +83837,41 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | calleeImports | fs | @@ -10569,6 +83881,41 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | calleeImports | fs | @@ -10578,12 +83925,100 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | receiverName | fs | +| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 | +| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:6 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:6 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:6 | server | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:13 | server.listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:13 | server.listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:13 | server.listen | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | exceptional return of server.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | exceptional return of server.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | exceptional return of server.listen() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | server.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | server.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | server.listen() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:34:8:34:13 | listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:8:34:13 | listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:34:8:34:13 | listen | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs ... de:fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs ... de:fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs ... de:fs') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:20 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:20 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:20 | require | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | exceptional return of require('node:fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | exceptional return of require('node:fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | exceptional return of require('node:fs') | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | require('node:fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | require('node:fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | require('node:fs') | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | calleeImports | | | autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:38:11 | server2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:38:11 | server2 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:38:11 | server2 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:18 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:18 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:18 | http | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:31 | http.createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:31 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:31 | http.createServer | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:20:38:31 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:20:38:31 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:20:38:31 | createServer | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | calleeImports | http | @@ -10591,6 +84026,81 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path = ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path = ... ry.path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | calleeImports | url | @@ -10600,6 +84110,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | calleeImports | url | @@ -10609,6 +84124,41 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | receiverName | url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path | +| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | CalleeFlexibleAccessPath | nodefs.readFileSync | | autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | calleeImports | node:fs | @@ -10618,12 +84168,92 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | receiverName | nodefs | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:7 | server2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:7 | server2 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:7 | server2 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:14 | server2.listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:14 | server2.listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:14 | server2.listen | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | exceptional return of server2.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | exceptional return of server2.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | exceptional return of server2.listen() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | server2.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | server2.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | server2.listen() | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:43:9:43:14 | listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:9:43:14 | listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:43:9:43:14 | listen | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr ... hownr") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr ... hownr") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr ... hownr") | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:22 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:22 | require | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | exceptional return of require("chownr") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | exceptional return of require("chownr") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | exceptional return of require("chownr") | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | require("chownr") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | require("chownr") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | require("chownr") | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | calleeImports | | | autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:5:47:11 | server3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:5:47:11 | server3 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:5:47:11 | server3 | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:5:50:2 | server3 ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:5:50:2 | server3 ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:5:50:2 | server3 ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:18 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:18 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:18 | http | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:31 | http.createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:31 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:31 | http.createServer | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:20:47:31 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:20:47:31 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:20:47:31 | createServer | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | calleeImports | http | @@ -10631,6 +84261,81 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | receiverName | http | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path = ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path = ... ry.path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | calleeImports | url | @@ -10640,6 +84345,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | calleeImports | url | @@ -10649,6 +84359,31 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | receiverName | url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | CalleeFlexibleAccessPath | chownr | | autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | calleeImports | chownr | @@ -10673,6 +84408,21 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | | autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url | | autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | CalleeFlexibleAccessPath | chownr | | autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | InputArgumentIndex | 3 | | autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | calleeImports | chownr | @@ -10681,36 +84431,193 @@ tokenFeatures | autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | | autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | contextSurroundingFunctionParameters | (req, res)\n(err) | +| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err | +| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | fileImports | chownr fs http node:fs url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:0 | this | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs = require('fs') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:16 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:16 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | exceptional return of require('fs') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | require('fs') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | calleeImports | | | autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:8 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:8 | http | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http = ... 'http') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:18 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:18 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | exceptional return of require('http') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | require('http') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | calleeImports | | | autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url = require('url') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:17 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:17 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | exceptional return of require('url') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | require('url') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | calleeImports | | | autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:12 | sanitize | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:12 | sanitize | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:43 | sanitiz ... ename') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:22 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:22 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | exceptional return of require ... ename') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | require ... ename') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | require ... ename') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | calleeImports | | | autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:14 | pathModule | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:14 | pathModule | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:32 | pathMod ... 'path') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:24 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:24 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | exceptional return of require('path') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | require('path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | require('path') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | calleeImports | | | autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:8:10 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:8:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:8:10 | server | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server ... NCY]\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server ... NCY]\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server ... NCY]\\n}) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:17 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:17 | http | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:30 | http.createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:30 | http.createServer | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | exceptional return of http.cr ... NCY]\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | exceptional return of http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | exceptional return of http.cr ... NCY]\\n}) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | http.cr ... NCY]\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | http.cr ... NCY]\\n}) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:19:8:30 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:19:8:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:19:8:30 | createServer | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | calleeImports | http | @@ -10718,6 +84625,86 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | receiverName | http | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path = ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path = ... ry.path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | calleeImports | url | @@ -10727,6 +84714,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | calleeImports | url | @@ -10736,6 +84728,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | receiverName | url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | contextFunctionInterfaces | | @@ -10744,6 +84786,21 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | receiverName | res | +| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | calleeImports | fs | @@ -10753,6 +84810,36 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | receiverName | fs | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | CalleeFlexibleAccessPath | ?.join | | autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | contextFunctionInterfaces | | @@ -10760,6 +84847,111 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | | autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextSurroundingFunctionParameters | (req, res)\n(x) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | CalleeFlexibleAccessPath | parts.map | | autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | contextFunctionInterfaces | | @@ -10768,6 +84960,71 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | receiverName | parts | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | contextSurroundingFunctionParameters | (req, res)\n(x) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | contextSurroundingFunctionParameters | (req, res)\n(x) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | contextSurroundingFunctionParameters | (req, res)\n(x) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | contextSurroundingFunctionParameters | (req, res)\n(x) | +| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | contextFunctionInterfaces | | @@ -10776,6 +85033,26 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | receiverName | res | +| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | calleeImports | fs | @@ -10785,6 +85062,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | receiverName | fs | +| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / | +| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | CalleeFlexibleAccessPath | parts.join | | autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | contextFunctionInterfaces | | @@ -10793,12 +85075,92 @@ tokenFeatures | autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | receiverName | parts | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:6 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:6 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:6 | server | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:13 | server.listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:13 | server.listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:13 | server.listen | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | exceptional return of server.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | exceptional return of server.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | exceptional return of server.listen() | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | server.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | server.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | server.listen() | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-array-steps.js:17:8:17:13 | listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:8:17:13 | listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-array-steps.js:17:8:17:13 | listen | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | __dirname | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | this | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | __dirname | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | __dirname | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | __dirname | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | require | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | resolve | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | resolve | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:11 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:11 | express | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express ... press') | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:21 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:21 | require | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | exceptional return of require('express') | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | require('express') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | require('express') | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | calleeImports | | | autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:7 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:7 | app | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app = express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app = express() | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:17 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:17 | express | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | exceptional return of express() | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | express() | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:1:5:3 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:1:5:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:1:5:3 | app | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:1:5:7 | app.get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:1:5:7 | app.get | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | app.get ... "));\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | app.get ... "));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | app.get ... "));\\n}) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | exceptional return of app.get ... "));\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | exceptional return of app.get ... "));\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | exceptional return of app.get ... "));\\n}) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:5:5:7 | get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:5:5:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:5:5:7 | get | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | calleeImports | express | @@ -10806,6 +85168,26 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | receiverName | app | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | calleeImports | express | @@ -10813,6 +85195,66 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | receiverName | app | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | calleeImports | | @@ -10821,6 +85263,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | enclosingFunctionBody | req res m require req param module | | autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | enclosingFunctionBody | req res m require req param module | +| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | contextFunctionInterfaces | | @@ -10829,12 +85276,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | receiverName | req | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve ... solve") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve ... solve") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve ... solve") | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:23 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:23 | require | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | exceptional return of require("resolve") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | exceptional return of require("resolve") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | exceptional return of require("resolve") | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | require("resolve") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | require("resolve") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | require("resolve") | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | calleeImports | | | autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:1:11:3 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:1:11:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:1:11:3 | app | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:1:11:7 | app.get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:1:11:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:1:11:7 | app.get | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | app.get ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | app.get ... });\\n}) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | exceptional return of app.get ... });\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | exceptional return of app.get ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | exceptional return of app.get ... });\\n}) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:5:11:7 | get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:5:11:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:5:11:7 | get | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | calleeImports | express | @@ -10842,6 +85323,31 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | receiverName | app | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ... });\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ... });\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ... });\\n} | calleeImports | express | @@ -10849,6 +85355,76 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ... });\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ... });\\n} | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ... });\\n} | receiverName | app | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module ... dule")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module ... dule")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module ... dule")) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module ... dule")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module ... dule")) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | CalleeFlexibleAccessPath | resolve.sync | | autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | calleeImports | resolve | @@ -10858,6 +85434,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | receiverName | resolve | +| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | contextFunctionInterfaces | | @@ -10866,6 +85447,36 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | receiverName | req | +| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n }) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n }) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n }) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n }) | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | CalleeFlexibleAccessPath | resolve | | autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | calleeImports | resolve | @@ -10874,6 +85485,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | | autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | contextFunctionInterfaces | | @@ -10890,6 +85506,21 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | | autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | CalleeFlexibleAccessPath | resolve | | autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | InputAccessPathFromCallee | 1.basedir | | autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | InputArgumentIndex | 1 | @@ -10900,6 +85531,21 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | | autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | fileImports | express resolve | | autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n } | CalleeFlexibleAccessPath | resolve | | autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n } | InputArgumentIndex | 2 | | autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n } | calleeImports | resolve | @@ -10908,12 +85554,90 @@ tokenFeatures | autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n } | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | | autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n } | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) | +| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res | +| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | fileImports | express resolve | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:0 | this | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | require | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:11 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:11 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:11 | express | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express ... press') | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:21 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:21 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:21 | require | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | exceptional return of require('express') | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | require('express') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | require('express') | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | calleeImports | | | autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path = ... 'path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path = ... 'path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path = ... 'path') | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:18 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:18 | require | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | exceptional return of require('path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | exceptional return of require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | exceptional return of require('path') | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | require('path') | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | require('path') | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | require('path') | fileImports | express path | @@ -10923,6 +85647,39 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:7 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:7 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:7 | app | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app = express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app = express() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:17 | express | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:17 | express | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:17 | express | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | exceptional return of express() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | express() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | express() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | express() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:3 | app | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:3 | app | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:3 | app | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:7 | app.get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:7 | app.get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:7 | app.get | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | app.get ... ta/'\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | app.get ... ta/'\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | app.get ... ta/'\\n}) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | exceptional return of app.get ... ta/'\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | exceptional return of app.get ... ta/'\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | exceptional return of app.get ... ta/'\\n}) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:5:6:7 | get | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:5:6:7 | get | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:5:6:7 | get | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | calleeImports | express | @@ -10930,6 +85687,26 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | receiverName | app | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | CalleeFlexibleAccessPath | app.get | | autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | calleeImports | express | @@ -10937,6 +85714,71 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | receiverName | app | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | contextFunctionInterfaces | | @@ -10945,6 +85787,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | contextFunctionInterfaces | | @@ -10953,6 +85800,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | receiverName | req | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendfile | | autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | contextFunctionInterfaces | | @@ -10961,6 +85848,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | contextFunctionInterfaces | | @@ -10969,6 +85861,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | receiverName | req | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | contextFunctionInterfaces | | @@ -10977,6 +85909,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | contextFunctionInterfaces | | @@ -10993,6 +85930,36 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | InputAccessPathFromCallee | 1.root | | autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | InputArgumentIndex | 1 | @@ -11002,6 +85969,51 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | | autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendfile | | autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | contextFunctionInterfaces | | @@ -11010,6 +86022,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | contextFunctionInterfaces | | @@ -11026,6 +86043,36 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | CalleeFlexibleAccessPath | res.sendfile | | autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | InputAccessPathFromCallee | 1.root | | autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | InputArgumentIndex | 1 | @@ -11035,6 +86082,51 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | | autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | contextFunctionInterfaces | | @@ -11043,6 +86135,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | contextFunctionInterfaces | | @@ -11059,6 +86156,36 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | InputAccessPathFromCallee | 1.root | | autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | InputArgumentIndex | 1 | @@ -11068,6 +86195,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | | autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | CalleeFlexibleAccessPath | req.param | | autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | contextFunctionInterfaces | | @@ -11076,6 +86208,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | receiverName | req | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | CalleeFlexibleAccessPath | path.resolve | | autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | calleeImports | path | @@ -11085,6 +86257,42 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | receiverName | path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | stringConcatenatedWith | -endpoint- '/data/' + req.params.x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | contextFunctionInterfaces | | @@ -11093,6 +86301,69 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | stringConcatenatedWith | homeDir -endpoint- req.params.x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | stringConcatenatedWith | homeDir + '/data/' -endpoint- | +| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | stringConcatenatedWith | -endpoint- req.params.x | | autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | CalleeFlexibleAccessPath | res.sendfile | | autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | contextFunctionInterfaces | | @@ -11101,6 +86372,72 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | stringConcatenatedWith | 'data/' -endpoint- | +| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | contextFunctionInterfaces | | @@ -11109,6 +86446,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | CalleeFlexibleAccessPath | path.resolve | | autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | calleeImports | path | @@ -11118,6 +86460,16 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | receiverName | path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | CalleeFlexibleAccessPath | path.resolve | | autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | calleeImports | path | @@ -11127,6 +86479,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | receiverName | path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | CalleeFlexibleAccessPath | res.sendfile | | autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | contextFunctionInterfaces | | @@ -11135,6 +86537,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | CalleeFlexibleAccessPath | path.join | | autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | calleeImports | path | @@ -11144,6 +86551,16 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | receiverName | path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | CalleeFlexibleAccessPath | path.join | | autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | calleeImports | path | @@ -11153,6 +86570,47 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | receiverName | path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | stringConcatenatedWith | -endpoint- path.join() | | autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | CalleeFlexibleAccessPath | res.sendFile | | autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | contextFunctionInterfaces | | @@ -11161,6 +86619,32 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | receiverName | res | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | stringConcatenatedWith | homeDir -endpoint- | +| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | CalleeFlexibleAccessPath | path.join | | autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | calleeImports | path | @@ -11170,6 +86654,16 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | receiverName | path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | CalleeFlexibleAccessPath | path.join | | autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | calleeImports | path | @@ -11179,24 +86673,151 @@ tokenFeatures | autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | enclosingFunctionName | app.get#functionalargument | | autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | fileImports | express path | | autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | receiverName | path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | fileImports | express path | +| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x | +| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | enclosingFunctionName | app.get#functionalargument | +| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | fileImports | express path | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:0 | this | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | require | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | url | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs = require('fs') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:16 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:16 | require | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | exceptional return of require('fs') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | require('fs') | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | calleeImports | | | autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:8 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:8 | http | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http = ... 'http') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:18 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:18 | require | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | exceptional return of require('http') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | require('http') | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | calleeImports | | | autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url = require('url') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:17 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:17 | require | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | exceptional return of require('url') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | require('url') | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | calleeImports | | | autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | contextFunctionInterfaces | | | autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:5:10 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:5:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:5:10 | server | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server ... NCY]\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server ... NCY]\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server ... NCY]\\n}) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:17 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:17 | http | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:30 | http.createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:30 | http.createServer | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | exceptional return of http.cr ... NCY]\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | exceptional return of http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | exceptional return of http.cr ... NCY]\\n}) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | http.cr ... NCY]\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | http.cr ... NCY]\\n}) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:19:5:30 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:19:5:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:19:5:30 | createServer | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | calleeImports | http | @@ -11204,6 +86825,81 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | receiverName | http | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path = ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path = ... ry.path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | calleeImports | url | @@ -11213,6 +86909,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | calleeImports | url | @@ -11222,6 +86923,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | receiverName | url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | calleeImports | fs | @@ -11231,6 +86982,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | CalleeFlexibleAccessPath | path.substring | | autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | calleeImports | url | @@ -11249,6 +87005,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | calleeImports | fs | @@ -11258,6 +87054,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | CalleeFlexibleAccessPath | path.substring | | autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | calleeImports | url | @@ -11267,6 +87068,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | calleeImports | fs | @@ -11276,6 +87117,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | CalleeFlexibleAccessPath | path.substring | | autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | calleeImports | url | @@ -11294,6 +87140,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | calleeImports | fs | @@ -11303,6 +87189,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | CalleeFlexibleAccessPath | path.substr | | autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | calleeImports | url | @@ -11312,6 +87203,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | calleeImports | fs | @@ -11321,6 +87252,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | CalleeFlexibleAccessPath | path.slice | | autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | calleeImports | url | @@ -11330,6 +87266,47 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | stringConcatenatedWith | -endpoint- unknown | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | calleeImports | fs | @@ -11339,6 +87316,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | CalleeFlexibleAccessPath | path.concat | | autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | calleeImports | url | @@ -11349,6 +87331,47 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | receiverName | path | | autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | stringConcatenatedWith | path -endpoint- | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | stringConcatenatedWith | -endpoint- path | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | calleeImports | fs | @@ -11358,6 +87381,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | CalleeFlexibleAccessPath | unknown.concat | | autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | contextFunctionInterfaces | | @@ -11367,6 +87395,47 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | receiverName | unknown | | autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | stringConcatenatedWith | unknown -endpoint- | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ... path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ... path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ... path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ... path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ... path)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ... path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ... path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ... path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ... path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ... path)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | stringConcatenatedWith | -endpoint- unknown + path | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | calleeImports | fs | @@ -11376,6 +87445,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | CalleeFlexibleAccessPath | unknown.concat | | autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | contextFunctionInterfaces | | @@ -11394,6 +87468,46 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | receiverName | unknown | | autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | stringConcatenatedWith | unknown + unknown -endpoint- | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | calleeImports | fs | @@ -11403,6 +87517,51 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | calleeImports | fs | @@ -11412,6 +87571,51 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | calleeImports | fs | @@ -11421,6 +87625,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | calleeImports | url | @@ -11430,6 +87639,51 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | calleeImports | fs | @@ -11439,6 +87693,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | calleeImports | url | @@ -11448,6 +87707,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | calleeImports | fs | @@ -11457,6 +87766,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | calleeImports | url | @@ -11466,6 +87780,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | calleeImports | fs | @@ -11475,6 +87839,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | calleeImports | url | @@ -11484,6 +87853,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | calleeImports | fs | @@ -11493,6 +87912,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | calleeImports | url | @@ -11502,6 +87926,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | calleeImports | fs | @@ -11511,6 +87985,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | calleeImports | url | @@ -11520,6 +87999,56 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | calleeImports | fs | @@ -11529,6 +88058,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | calleeImports | url | @@ -11538,6 +88072,51 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | calleeImports | fs | @@ -11547,6 +88126,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | calleeImports | url | @@ -11556,6 +88140,51 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | calleeImports | fs | @@ -11565,6 +88194,11 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | receiverName | fs | +| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | CalleeFlexibleAccessPath | path.split | | autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | InputArgumentIndex | 0 | | autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | calleeImports | url | @@ -11574,18 +88208,179 @@ tokenFeatures | autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | fileImports | fs http url | | autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | receiverName | path | +| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i | +| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:6 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:6 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:6 | server | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:13 | server.listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:13 | server.listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:13 | server.listen | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | exceptional return of server.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | exceptional return of server.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | exceptional return of server.listen() | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | server.listen() | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | server.listen() | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | server.listen() | fileImports | fs http url | +| autogenerated/TaintedPath/tainted-string-steps.js:31:8:31:13 | listen | contextFunctionInterfaces | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:8:31:13 | listen | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/tainted-string-steps.js:31:8:31:13 | listen | fileImports | fs http url | +| autogenerated/TaintedPath/torrents.js:1:1:1:0 | this | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:1:1:0 | this | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | fs | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | parseTorrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | require | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:1:1:1 | require | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTo ... rrent') | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTo ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTo ... rrent') | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTorrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:22:1:28 | require | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:22:1:28 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:22:1:28 | require | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:22:1:45 | exceptional return of require ... rrent') | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:22:1:45 | exceptional return of require ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:22:1:45 | exceptional return of require ... rrent') | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:1:22:1:45 | require ... rrent') | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:1:22:1:45 | require ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:1:22:1:45 | require ... rrent') | fileImports | fs parse-torrent | | autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | calleeImports | | | autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | contextFunctionInterfaces | getTorrentData(dir, torrent) | | autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs = require('fs') | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs = require('fs') | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:2:12:2:18 | require | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:2:12:2:18 | require | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:2:12:2:24 | exceptional return of require('fs') | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:2:12:2:24 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:2:12:2:24 | exceptional return of require('fs') | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:2:12:2:24 | require('fs') | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:2:12:2:24 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:2:12:2:24 | require('fs') | fileImports | fs parse-torrent | | autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | calleeImports | | | autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | contextFunctionInterfaces | getTorrentData(dir, torrent) | | autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | functio ... OT OK\\n} | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | functio ... OT OK\\n} | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:10:4:23 | getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:10:4:23 | getTorrentData | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:10:4:23 | getTorrentData | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name = ... t).name | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name = ... t).name | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name = ... t).name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name = ... t).name | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name = ... t).name | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | fileImports | fs parse-torrent | | autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | CalleeFlexibleAccessPath | parseTorrent | | autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | InputArgumentIndex | 0 | | autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | calleeImports | parse-torrent | @@ -11594,11 +88389,90 @@ tokenFeatures | autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | | autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | enclosingFunctionName | getTorrentData | | autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | stringConcatenatedWith | -endpoint- '/' + name + '.torrent.data' | | autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | contextFunctionInterfaces | getTorrentData(dir, torrent) | | autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | contextSurroundingFunctionParameters | (dir, torrent) | | autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | | autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | enclosingFunctionName | getTorrentData | | autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | stringConcatenatedWith | dir -endpoint- name + '.torrent.data' | +| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | stringConcatenatedWith | dir + '/' -endpoint- '.torrent.data' | +| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | stringConcatenatedWith | dir + '/' + name -endpoint- | +| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | fileImports | fs parse-torrent | +| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | contextFunctionInterfaces | getTorrentData(dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | contextSurroundingFunctionParameters | (dir, torrent) | +| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc | +| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | enclosingFunctionName | getTorrentData | +| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | fileImports | fs parse-torrent | | autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | InputArgumentIndex | 0 | | autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | calleeImports | fs | @@ -11608,36 +88482,180 @@ tokenFeatures | autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | enclosingFunctionName | getTorrentData | | autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | fileImports | fs parse-torrent | | autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | receiverName | fs | +| autogenerated/TaintedPath/typescript.ts:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:0 | this | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs = require('fs') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:10:1:16 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:10:1:16 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:10:1:16 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | exceptional return of require('fs') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | require('fs') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | require('fs') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | calleeImports | | | autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | contextFunctionInterfaces | | | autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:2:5:2:8 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:2:5:2:8 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:2:5:2:8 | http | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http = ... 'http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http = ... 'http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http = ... 'http') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:2:12:2:18 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:2:12:2:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:2:12:2:18 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | exceptional return of require('http') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | require('http') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | require('http') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | require('http') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | calleeImports | | | autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | contextFunctionInterfaces | | | autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url = require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url = require('url') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:3:11:3:17 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:3:11:3:17 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:3:11:3:17 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | exceptional return of require('url') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | require('url') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | require('url') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | require('url') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | calleeImports | | | autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | contextFunctionInterfaces | | | autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:4:5:4:12 | sanitize | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:4:5:4:12 | sanitize | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:4:5:4:12 | sanitize | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:4:5:4:43 | sanitiz ... ename') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:4:16:4:22 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:4:16:4:22 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:4:16:4:22 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | exceptional return of require ... ename') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | require ... ename') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | require ... ename') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | calleeImports | | | autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces | | | autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:5:5:5:14 | pathModule | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:5:5:5:14 | pathModule | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:5:5:5:14 | pathModule | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:5:5:5:32 | pathMod ... 'path') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:5:18:5:24 | require | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:5:18:5:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:5:18:5:24 | require | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | exceptional return of require('path') | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | require('path') | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | require('path') | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | require('path') | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require | | autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | calleeImports | | | autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | contextFunctionInterfaces | | | autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | contextSurroundingFunctionParameters | | | autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:5:8:10 | server | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:5:8:10 | server | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:5:8:10 | server | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:5:34:2 | server ... ted\\n\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:5:34:2 | server ... ted\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:5:34:2 | server ... ted\\n\\n}) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:14:8:17 | http | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:14:8:17 | http | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:14:8:17 | http | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:14:8:30 | http.createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:14:8:30 | http.createServer | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | exceptional return of http.cr ... ted\\n\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | exceptional return of http.cr ... ted\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | exceptional return of http.cr ... ted\\n\\n}) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | http.cr ... ted\\n\\n}) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | http.cr ... ted\\n\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | http.cr ... ted\\n\\n}) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:19:8:30 | createServer | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:19:8:30 | createServer | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:19:8:30 | createServer | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | CalleeFlexibleAccessPath | http.createServer | | autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | calleeImports | http | @@ -11645,6 +88663,86 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | receiverName | http | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path = ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path = ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path = ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path = ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path = ... ry.path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | calleeImports | url | @@ -11654,6 +88752,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | receiverName | url | +| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse | | autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | InputArgumentIndex | 1 | | autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | calleeImports | url | @@ -11663,6 +88766,56 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | receiverName | url | +| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | contextFunctionInterfaces | | @@ -11671,6 +88824,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | calleeImports | fs | @@ -11680,6 +88838,71 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | receiverName | fs | +| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | contextFunctionInterfaces | | @@ -11688,6 +88911,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | receiverName | res | +| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | calleeImports | fs | @@ -11697,6 +88925,86 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | receiverName | fs | +| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | contextFunctionInterfaces | | @@ -11705,6 +89013,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | receiverName | res | +| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | calleeImports | fs | @@ -11714,6 +89027,81 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | receiverName | fs | +| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | contextFunctionInterfaces | | @@ -11722,6 +89110,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | receiverName | res | +| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | calleeImports | fs | @@ -11731,6 +89124,76 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | receiverName | fs | +| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | contextFunctionInterfaces | | @@ -11739,6 +89202,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | receiverName | res | +| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | calleeImports | fs | @@ -11748,6 +89216,96 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | receiverName | fs | +| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | contextFunctionInterfaces | | @@ -11756,6 +89314,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | receiverName | res | +| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | calleeImports | fs | @@ -11765,6 +89328,96 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | receiverName | fs | +| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url | +| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | CalleeFlexibleAccessPath | res.write | | autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | contextFunctionInterfaces | | @@ -11773,6 +89426,11 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | receiverName | res | +| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | contextFunctionInterfaces | | +| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 | +| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | CalleeFlexibleAccessPath | fs.readFileSync | | autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | InputArgumentIndex | 0 | | autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | calleeImports | fs | @@ -11782,6 +89440,98 @@ tokenFeatures | autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | fileImports | fs http path sanitize-filename url | | autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | receiverName | fs | +| autogenerated/TaintedPath/views.js:1:1:1:0 | this | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:1:1:0 | this | fileImports | | +| autogenerated/TaintedPath/views.js:1:1:1:1 | module | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:1:1:1 | module | fileImports | | +| autogenerated/TaintedPath/views.js:1:1:1:6 | module | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:1:1:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:1:1:6 | module | fileImports | | +| autogenerated/TaintedPath/views.js:1:1:1:14 | module.exports | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:1:1:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:1:1:14 | module.exports | fileImports | | +| autogenerated/TaintedPath/views.js:1:1:1:56 | module. ... ams[0]) | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:1:1:56 | module. ... ams[0]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:1:1:56 | module. ... ams[0]) | fileImports | | +| autogenerated/TaintedPath/views.js:1:8:1:14 | exports | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:8:1:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:8:1:14 | exports | fileImports | | +| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | assignedToPropName | exports | +| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | fileImports | | +| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | fileImports | | +| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | fileImports | | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | fileImports | | +| autogenerated/TaintedPath/views.js:1:19:1:21 | req | fileImports | | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | fileImports | | +| autogenerated/TaintedPath/views.js:1:24:1:26 | res | fileImports | | +| autogenerated/TaintedPath/views.js:1:32:1:34 | res | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:32:1:34 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:32:1:34 | res | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:32:1:34 | res | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:32:1:34 | res | fileImports | | +| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | fileImports | | +| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | contextSurroundingFunctionParameters | | +| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | fileImports | | +| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | fileImports | | +| autogenerated/TaintedPath/views.js:1:36:1:41 | render | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:36:1:41 | render | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:36:1:41 | render | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:36:1:41 | render | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:36:1:41 | render | fileImports | | +| autogenerated/TaintedPath/views.js:1:43:1:45 | req | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:43:1:45 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:43:1:45 | req | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:43:1:45 | req | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:43:1:45 | req | fileImports | | +| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | fileImports | | | autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | CalleeFlexibleAccessPath | res.render | | autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | InputArgumentIndex | 0 | | autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | contextFunctionInterfaces | exports(req, res) | @@ -11790,16 +89540,104 @@ tokenFeatures | autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | enclosingFunctionName | exports | | autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | fileImports | | | autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | receiverName | res | +| autogenerated/TaintedPath/views.js:1:47:1:52 | params | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:47:1:52 | params | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:47:1:52 | params | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:47:1:52 | params | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:47:1:52 | params | fileImports | | +| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | contextFunctionInterfaces | exports(req, res) | +| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | enclosingFunctionBody | req res res render req 0 params 0 | +| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | enclosingFunctionName | exports | +| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:0 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:4 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:4 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:4 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:21 | this.ad ... istener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:21 | this.ad ... istener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:21 | this.ad ... istener | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | exceptional return of this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | exceptional return of this.ad ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | exceptional return of this.ad ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | this.ad ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | this.ad ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:6:1:21 | addEventListener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:6:1:21 | addEventListener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:6:1:21 | addEventListener | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | CalleeFlexibleAccessPath | this.addEventListener | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | this.addEventListener | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (event) | | autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextSurroundingFunctionParameters | (event) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | contextSurroundingFunctionParameters | (event) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | contextSurroundingFunctionParameters | (event) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | contextSurroundingFunctionParameters | (event) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | contextSurroundingFunctionParameters | (event) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | contextSurroundingFunctionParameters | (event) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | CalleeFlexibleAccessPath | document.write | | autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11808,16 +89646,111 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | enclosingFunctionName | addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | receiverName | document | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | contextSurroundingFunctionParameters | (event) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | enclosingFunctionBody | event document write event data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:4 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:4 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:4 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:21 | this.ad ... istener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:21 | this.ad ... istener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:21 | this.ad ... istener | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | exceptional return of this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | exceptional return of this.ad ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | exceptional return of this.ad ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | this.ad ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | this.ad ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:6:5:21 | addEventListener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:6:5:21 | addEventListener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:6:5:21 | addEventListener | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | CalleeFlexibleAccessPath | this.addEventListener | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | this.addEventListener | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (?) | | autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | contextSurroundingFunctionParameters | (?) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters | (?) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters | (?) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | contextSurroundingFunctionParameters | (?) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | contextSurroundingFunctionParameters | (?) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | contextSurroundingFunctionParameters | (?) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | contextSurroundingFunctionParameters | (?) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | enclosingFunctionBody | data document write data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | enclosingFunctionName | addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | CalleeFlexibleAccessPath | document.write | | autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11826,6 +89759,127 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | enclosingFunctionName | addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | receiverName | document | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | functio ... }\\n} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | functio ... }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | functio ... }\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:10:9:13 | test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:10:9:13 | test | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:9:10:9:13 | test | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n } | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | CalleeFlexibleAccessPath | document.write | | autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11834,6 +89888,41 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | receiverName | document | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | CalleeFlexibleAccessPath | document.write | | autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11842,6 +89931,41 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | receiverName | document | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | CalleeFlexibleAccessPath | document.write | | autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11850,6 +89974,36 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | receiverName | document | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | contextSurroundingFunctionParameters | (x, event, y) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | CalleeFlexibleAccessPath | window.addEventListener | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11858,6 +90012,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | receiverName | window | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | CalleeFlexibleAccessPath | window.addEventListener | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11866,6 +90035,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | receiverName | window | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | CalleeFlexibleAccessPath | foo.bind | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11882,6 +90056,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | receiverName | foo | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | CalleeFlexibleAccessPath | foo.bind | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | InputAccessPathFromCallee | 1.data | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | InputArgumentIndex | 1 | @@ -11891,6 +90080,112 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n } | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n } | assignedToPropName | onmessage | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n } | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n } | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | CalleeFlexibleAccessPath | document.write | | autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11899,6 +90194,92 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | receiverName | document | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n } | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n } | assignedToPropName | onmessage | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n } | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n } | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | CalleeFlexibleAccessPath | mySet.includes | | autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11907,6 +90288,41 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | receiverName | mySet | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | fileImports | | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | CalleeFlexibleAccessPath | document.write | | autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | @@ -11915,6 +90331,141 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | fileImports | | | autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | receiverName | document | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:0 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:0 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:1 | \u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:1 | \u0275getDOM | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:1 | \u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:81 | import ... /core'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:81 | import ... /core'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:81 | import ... /core'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:40 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:40 | DomSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:40 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:57 | DomSani ... itizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:57 | DomSani ... itizer2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:57 | DomSani ... itizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:45:1:57 | DomSanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:45:1:57 | DomSanitizer2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:45:1:57 | DomSanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:66:1:80 | '@angular/core' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:66:1:80 | '@angular/core' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:66:1:80 | '@angular/core' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:1:2:42 | import ... ommon'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:1:2:42 | import ... ommon'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:1:2:42 | import ... ommon'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:25:2:41 | '@angular/common' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:25:2:41 | '@angular/common' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:25:2:41 | '@angular/common' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:1:3:81 | import ... outer'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:1:3:81 | import ... outer'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:1:3:81 | import ... outer'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:64:3:80 | '@angular/router' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:64:3:80 | '@angular/router' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:64:3:80 | '@angular/router' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:1:4:57 | import ... owser'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:1:4:57 | import ... owser'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:1:4:57 | import ... owser'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:30:4:56 | '@angul ... rowser' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:30:4:56 | '@angul ... rowser' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:30:4:56 | '@angul ... rowser' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:1:10:2 | @Compon ... ss']\\n}) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:1:10:2 | @Compon ... ss']\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:1:10:2 | @Compon ... ss']\\n}) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:6:10 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:6:10 | Component | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:6:10 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | Compone ... ss']\\n}) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | Compone ... ss']\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | Compone ... ss']\\n}) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | exceptional return of Compone ... ss']\\n}) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | exceptional return of Compone ... ss']\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | exceptional return of Compone ... ss']\\n}) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:10 | selector | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:10 | selector | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:10 | selector | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | CalleeFlexibleAccessPath | Component | | autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | InputAccessPathFromCallee | 0.selector | | autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | InputArgumentIndex | 0 | @@ -11923,6 +90474,15 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | | autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:13 | templateUrl | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:13 | templateUrl | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:13 | templateUrl | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | CalleeFlexibleAccessPath | Component | | autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | InputAccessPathFromCallee | 0.templateUrl | | autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | InputArgumentIndex | 0 | @@ -11931,6 +90491,15 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | | autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:11 | styleUrls | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:11 | styleUrls | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:11 | styleUrls | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | CalleeFlexibleAccessPath | Component | | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | InputAccessPathFromCallee | 0.styleUrls | | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | InputArgumentIndex | 0 | @@ -11940,8 +90509,222 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:8:46:1 | class A ... K\\n }\\n} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:8:46:1 | class A ... K\\n }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:8:46:1 | class A ... K\\n }\\n} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:14:11:25 | AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:14:11:25 | AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:14:11:25 | AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | assignedToPropName | title | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | assignedToPropName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | assignedToPropName | route | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | assignedToPropName | sanitizer | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ... Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ... Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ... Router | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ... Router | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ... Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ... Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | assignedToPropName | router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | assignedToPropName | sanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:10 | ngOnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:10 | ngOnInit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:10 | ngOnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | assignedToPropName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ... OK\\n } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11949,6 +90732,71 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11956,6 +90804,81 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11963,6 +90886,76 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11970,6 +90963,86 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11977,6 +91050,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | CalleeFlexibleAccessPath | this.route.snapshot.paramMap.get | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11984,6 +91077,71 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11991,6 +91149,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | CalleeFlexibleAccessPath | this.route.snapshot.queryParamMap.get | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -11998,6 +91176,71 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n }) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n }) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n }) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n }) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n }) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n }) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n }) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n }) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n }) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map => ... K\\n } | CalleeFlexibleAccessPath | this.route.paramMap.subscribe | | autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map => ... K\\n } | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map => ... K\\n } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12005,6 +91248,61 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map => ... K\\n } | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map => ... K\\n } | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map => ... K\\n } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12012,6 +91310,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | contextSurroundingFunctionParameters | ()\n(map) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | CalleeFlexibleAccessPath | map.get | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12020,6 +91323,66 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | receiverName | map | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12027,6 +91390,96 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12034,6 +91487,111 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12041,6 +91599,36 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | CalleeFlexibleAccessPath | this.route.snapshot.url.1.parameterMap.get | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12048,6 +91636,76 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12055,6 +91713,86 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12062,6 +91800,61 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | CalleeFlexibleAccessPath | this.sanitizer2.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12069,6 +91862,114 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | | autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | enclosingFunctionName | ngOnInit | | autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | enclosingFunctionName | ngOnInit | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:12 | someMethod | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:12 | someMethod | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:12 | someMethod | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | assignedToPropName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ... OK\\n } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12076,6 +91977,16 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | enclosingFunctionName | someMethod | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | contextSurroundingFunctionParameters | (routeSnapshot) | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | enclosingFunctionName | someMethod | +| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | CalleeFlexibleAccessPath | routeSnapshot.paramMap.get | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) | @@ -12083,6 +91994,161 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | enclosingFunctionName | someMethod | | autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:0 | this | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:0 | this | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNames | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesB | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesB | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesD | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesD | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | clsx | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | clsx | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:36 | import ... names'; | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:36 | import ... names'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:36 | import ... names'; | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:1:24:1:35 | 'classnames' | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:1:24:1:35 | 'classnames' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:1:24:1:35 | 'classnames' | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:2:1:2:44 | import ... edupe'; | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:2:1:2:44 | import ... edupe'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:2:1:2:44 | import ... edupe'; | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:2:25:2:43 | 'classnames/dedupe' | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:2:25:2:43 | 'classnames/dedupe' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:2:25:2:43 | 'classnames/dedupe' | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:3:1:3:42 | import ... /bind'; | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:3:1:3:42 | import ... /bind'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:3:1:3:42 | import ... /bind'; | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:3:25:3:41 | 'classnames/bind' | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:3:25:3:41 | 'classnames/bind' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:3:25:3:41 | 'classnames/bind' | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:4:1:4:24 | import ... 'clsx'; | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:4:1:4:24 | import ... 'clsx'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:4:1:4:24 | import ... 'clsx'; | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:4:18:4:23 | 'clsx' | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:4:18:4:23 | 'clsx' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:4:18:4:23 | 'clsx' | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | functio ... OT OK\\n} | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | functio ... OT OK\\n} | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:6:10:6:13 | main | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:6:10:6:13 | main | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:6:10:6:13 | main | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... ` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... ` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... ` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `` | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `` | contextSurroundingFunctionParameters | () | @@ -12095,12 +92161,27 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:7:32:7:44 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | stringConcatenatedWith | 'Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | CalleeFlexibleAccessPath | classNames | | autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | calleeImports | classnames | @@ -12109,12 +92190,47 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello | stringConcatenatedWith | 'Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... ` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... ` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... ` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `` | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `` | contextSurroundingFunctionParameters | () | @@ -12127,12 +92243,27 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:8:32:8:44 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | stringConcatenatedWith | 'Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | CalleeFlexibleAccessPath | classNamesD | | autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | calleeImports | classnames/dedupe | @@ -12141,12 +92272,47 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello | stringConcatenatedWith | 'Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... ` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... ` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... ` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `` | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `` | contextSurroundingFunctionParameters | () | @@ -12159,12 +92325,27 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:9:32:9:44 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | stringConcatenatedWith | 'Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | CalleeFlexibleAccessPath | classNamesB | | autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | calleeImports | classnames/bind | @@ -12173,12 +92354,57 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello | stringConcatenatedWith | 'Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:19 | unsafeStyle | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:19 | unsafeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | CalleeFlexibleAccessPath | classNames.bind | | autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | calleeImports | classnames | @@ -12188,6 +92414,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | receiverName | classNames | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | CalleeFlexibleAccessPath | classNames.bind | | autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | InputAccessPathFromCallee | 0.foo | | autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | InputArgumentIndex | 0 | @@ -12198,6 +92444,41 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... ` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... ` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... ` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `` | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `` | contextSurroundingFunctionParameters | () | @@ -12210,6 +92491,16 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:11:32:11:44 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | @@ -12230,6 +92521,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello | stringConcatenatedWith | 'Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:17 | safeStyle | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:17 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | CalleeFlexibleAccessPath | classNames.bind | | autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | calleeImports | classnames | @@ -12239,6 +92570,36 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | receiverName | classNames | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... ` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... ` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... ` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `` | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `` | contextSurroundingFunctionParameters | () | @@ -12251,12 +92612,27 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:13:32:13:44 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | stringConcatenatedWith | 'Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | CalleeFlexibleAccessPath | safeStyle | | autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | calleeImports | classnames | @@ -12265,12 +92641,47 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello | stringConcatenatedWith | 'Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... ` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... ` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... ` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `` | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `` | contextSurroundingFunctionParameters | () | @@ -12283,6 +92694,16 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:14:32:14:44 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | @@ -12303,6 +92724,36 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello | stringConcatenatedWith | 'Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... ` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... ` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... ` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `` | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `` | contextSurroundingFunctionParameters | () | @@ -12315,12 +92766,27 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:15:32:15:44 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | stringConcatenatedWith | 'Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | CalleeFlexibleAccessPath | clsx | | autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | calleeImports | clsx | @@ -12329,12 +92795,27 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello | stringConcatenatedWith | 'Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | @@ -12346,18 +92827,48 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... ` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... ` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... ` | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `` | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `` | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `` | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | stringConcatenatedWith | document.body.innerHTML + 'Hello' | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | CalleeFlexibleAccessPath | clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | calleeImports | clsx | @@ -12366,17 +92877,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx | +| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | contextFunctionInterfaces | main() | +| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | +| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello | contextFunctionInterfaces | main() | | autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello | enclosingFunctionBody | document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello unsafeStyle classNames bind foo window name document body innerHTML Hello safeStyle classNames bind document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello document body innerHTML Hello | | autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello | fileImports | classnames classnames/bind classnames/dedupe clsx | | autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello | stringConcatenatedWith | document.body.innerHTML + ' ... \\n } | CalleeFlexibleAccessPath | el.addEventListener | | autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) => ... \\n } | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) => ... \\n } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12445,6 +93436,56 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) => ... \\n } | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) => ... \\n } | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) => ... \\n } | receiverName | el | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12452,6 +93493,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12459,6 +93520,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12466,18 +93542,88 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:8 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:8 | document | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:8 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:25 | documen ... istener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:25 | documen ... istener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:25 | documen ... istener | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | documen ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | documen ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | documen ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:10:28:25 | addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:10:28:25 | addEventListener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:10:28:25 | addEventListener | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | CalleeFlexibleAccessPath | document.addEventListener | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | receiverName | document | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) => ... OT OK\\n} | CalleeFlexibleAccessPath | document.addEventListener | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) => ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) => ... OT OK\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) => ... OT OK\\n} | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) => ... OT OK\\n} | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) => ... OT OK\\n} | receiverName | document | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12485,6 +93631,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | enclosingFunctionName | document.addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12492,6 +93658,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | enclosingFunctionName | document.addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12499,21 +93680,97 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | enclosingFunctionBody | e $ #id html e clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | enclosingFunctionName | document.addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:1 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:1 | $ | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:1 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | $("#foo") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | $("#foo") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | exceptional return of $("#foo") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | exceptional return of $("#foo") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:14 | $("#foo").bind | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:14 | $("#foo").bind | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:14 | $("#foo").bind | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | $("#foo ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:11:32:14 | bind | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:11:32:14 | bind | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:11:32:14 | bind | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | CalleeFlexibleAccessPath | $().bind | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) => ... OT OK\\n} | CalleeFlexibleAccessPath | $().bind | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) => ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) => ... OT OK\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) => ... OT OK\\n} | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) => ... OT OK\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12521,6 +93778,31 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | enclosingFunctionName | bind#functionalargument | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12528,6 +93810,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | enclosingFunctionName | bind#functionalargument | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | CalleeFlexibleAccessPath | e.originalEvent.clipboardData.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12535,6 +93837,78 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | enclosingFunctionName | bind#functionalargument | | autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:2 | (functi ... }\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:2 | (functi ... }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:2 | (functi ... }\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | (functi ... }\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | (functi ... }\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | (functi ... }\\n})() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | exceptional return of (functi ... }\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | exceptional return of (functi ... }\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | exceptional return of (functi ... }\\n})() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | functio ... }\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | functio ... }\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | functio ... }\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12543,6 +93917,157 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | receiverName | document | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n } | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n } | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n } | assignedToPropName | onpaste | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n } | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n } | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n } | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text = ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text = ... plain') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text = ... plain') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text = ... plain') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text = ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | CalleeFlexibleAccessPath | clipboardData.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12551,11 +94076,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | receiverName | clipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html = ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html = ... /html') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html = ... /html') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html = ... /html') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html = ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | contextSurroundingFunctionParameters | ()\n(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | CalleeFlexibleAccessPath | clipboardData.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12564,6 +94124,121 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | receiverName | clipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12572,12 +94247,103 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | receiverName | document | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | contextSurroundingFunctionParameters | ()\n(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ... = text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ... = text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ... = text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ... = text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ... = text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | assignedToPropName | textContent | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | CalleeFlexibleAccessPath | document.body.append | | autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12585,11 +94351,292 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | async f ... ms;\\n } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | async f ... ms;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | async f ... ms;\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:16:58:31 | getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:16:58:31 | getClipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:16:58:31 | getClipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file = ... iles[i] | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file = ... iles[i] | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file = ... iles[i] | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file = ... iles[i] | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file = ... iles[i] | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.types.includes | | autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12597,6 +94644,56 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12604,6 +94701,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12612,12 +94749,72 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | receiverName | document | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs = ... ('img') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs = ... ('img') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs = ... ('img') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs = ... ('img') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs = ... ('img') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | CalleeFlexibleAccessPath | container.getElementsByTagName | | autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12626,6 +94823,96 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | receiverName | container | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | CalleeFlexibleAccessPath | dropItems.add | | autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12634,6 +94921,51 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | receiverName | dropItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | CalleeFlexibleAccessPath | e.clipboardData.types.includes | | autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12641,6 +94973,56 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | CalleeFlexibleAccessPath | e.clipboardData.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12648,6 +95030,31 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | CalleeFlexibleAccessPath | ?.test | | autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12655,6 +95062,31 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | CalleeFlexibleAccessPath | dropItems.add | | autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12663,6 +95095,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | receiverName | dropItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | CalleeFlexibleAccessPath | Array.from | | autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12671,6 +95143,83 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | enclosingFunctionName | getClipboardData | | autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | receiverName | Array | +| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | enclosingFunctionName | getClipboardData | +| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:2 | (functi ... });\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:2 | (functi ... });\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:2 | (functi ... });\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | (functi ... );\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | (functi ... );\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | (functi ... );\\n})() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | exceptional return of (functi ... );\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | exceptional return of (functi ... );\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | exceptional return of (functi ... );\\n})() | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | functio ... });\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | functio ... });\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | functio ... });\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12679,6 +95228,31 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | receiverName | document | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n }) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n }) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n }) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n }) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n }) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n }) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n }) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n }) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n }) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | CalleeFlexibleAccessPath | div.addEventListener | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12687,6 +95261,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | receiverName | div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n } | CalleeFlexibleAccessPath | div.addEventListener | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n } | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12695,11 +95284,176 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n } | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n } | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n } | receiverName | div | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html = ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html = ... /html') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html = ... /html') | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html = ... /html') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html = ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | contextSurroundingFunctionParameters | ()\n(e) | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | CalleeFlexibleAccessPath | dataTransfer.getData | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12708,6 +95462,36 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | receiverName | dataTransfer | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12715,6 +95499,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | fileImports | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | fileImports | | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) | @@ -12722,18 +95511,410 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:1:1:0 | this | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:1:1:0 | this | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:8:1:17 | * as dummy | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:8:1:17 | * as dummy | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:8:1:17 | * as dummy | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:13:1:17 | dummy | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:13:1:17 | dummy | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:13:1:17 | dummy | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:24:1:30 | 'dummy' | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:24:1:30 | 'dummy' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:1:24:1:30 | 'dummy' | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:1:7:1 | class C ... }\\n} | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:1:7:1 | class C ... }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:1:7:1 | class C ... }\\n} | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:7:3:15 | CustomElm | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:7:3:15 | CustomElm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:7:3:15 | CustomElm | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:25:3:35 | HTMLElement | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:25:3:35 | HTMLElement | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:25:3:35 | HTMLElement | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | assignedToPropName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | contextSurroundingFunctionParameters | (args) | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | contextSurroundingFunctionParameters | (args) | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextSurroundingFunctionParameters | (args) | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextSurroundingFunctionParameters | (args) | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constructor | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constructor | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constructor | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | contextSurroundingFunctionParameters | (args) | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | contextSurroundingFunctionParameters | (args) | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | enclosingFunctionBody | args | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | enclosingFunctionName | constructor | +| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:4:8 | test | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:4:8 | test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:4:8 | test | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test() ... K\\n } | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test() ... K\\n } | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test() ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test() ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test() ... K\\n } | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test() ... K\\n } | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n ... K\\n } | assignedToPropName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n ... K\\n } | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n ... K\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n ... K\\n } | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | fileImports | dummy | | autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | contextFunctionInterfaces | constructor(args)\ntest() | | autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | enclosingFunctionBody | innerHTML window name | | autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | contextFunctionInterfaces | constructor(args)\ntest() | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | enclosingFunctionBody | innerHTML window name | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | fileImports | dummy | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:0 | this | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | d3 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | d3 | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | otherFunction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | require | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | require | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 = require('d3') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 = require('d3') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 = require('d3') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:18 | require | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:18 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:18 | require | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | exceptional return of require('d3') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | exceptional return of require('d3') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | exceptional return of require('d3') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | require('d3') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | require('d3') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | require('d3') | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | CalleeFlexibleAccessPath | require | | autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | calleeImports | | | autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | | autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | enclosingFunctionBody | window name | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | enclosingFunctionName | getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | enclosingFunctionBody | window name | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | enclosingFunctionName | getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | enclosingFunctionBody | window name | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | enclosingFunctionName | getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | functio ... name;\\n} | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | functio ... name;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | functio ... name;\\n} | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | enclosingFunctionBody | window name | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | enclosingFunctionName | getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | enclosingFunctionBody | window name | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | enclosingFunctionName | getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | enclosingFunctionBody | window name | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | enclosingFunctionName | getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | enclosingFunctionBody | window name | +| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | enclosingFunctionName | getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | functio ... OT OK\\n} | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | functio ... OT OK\\n} | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:7:10:7:20 | doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:7:10:7:20 | doSomething | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:7:10:7:20 | doSomething | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ... .attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ... .attr | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ... .attr | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ... .attr | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ... .attr | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ... .style | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ... .style | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ... .style | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ... .style | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ... .style | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ... 'red') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ... 'red') | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ... 'red') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ... 'red') | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ... 'red') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ... 'red') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ... 'red') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ... 'red') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ... 'red') | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ... 'red') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ... .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ... .html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ... .html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ... .html | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ... .html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ... .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ... .html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ... .html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ... .html | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ... .html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ... .call | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ... .call | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ... .call | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ... .call | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ... .call | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ... .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ... .html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ... .html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ... .html | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ... .html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | CalleeFlexibleAccessPath | d3.select | | autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | calleeImports | d3 | @@ -12743,6 +95924,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | enclosingFunctionName | doSomething | | autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | receiverName | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | CalleeFlexibleAccessPath | d3.select().attr | | autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | calleeImports | d3 | @@ -12759,6 +95945,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | | autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | enclosingFunctionName | doSomething | | autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | CalleeFlexibleAccessPath | d3.select().attr().style | | autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | calleeImports | d3 | @@ -12775,6 +95966,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | | autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | enclosingFunctionName | doSomething | | autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | CalleeFlexibleAccessPath | d3.select().attr().style().html | | autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | calleeImports | d3 | @@ -12783,6 +95989,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | | autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | enclosingFunctionName | doSomething | | autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | contextSurroundingFunctionParameters | ()\n(d) | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | CalleeFlexibleAccessPath | d3.select().attr().style().html().html | | autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | calleeImports | d3 | @@ -12791,6 +96017,36 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | | autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | enclosingFunctionName | doSomething | | autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | contextSurroundingFunctionParameters | ()\n(d) | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | contextSurroundingFunctionParameters | ()\n(d) | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | CalleeFlexibleAccessPath | d3.select().attr().style().html().html().call | | autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | calleeImports | d3 | @@ -12799,6 +96055,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | | autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | enclosingFunctionName | doSomething | | autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | contextSurroundingFunctionParameters | ()\n(d) | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | CalleeFlexibleAccessPath | d3.select().attr().style().html().html().call().html | | autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | calleeImports | d3 | @@ -12807,6 +96083,116 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | | autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | enclosingFunctionName | doSomething | | autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | contextSurroundingFunctionParameters | ()\n(d) | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | contextSurroundingFunctionParameters | ()\n(d) | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | enclosingFunctionName | doSomething | +| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | functio ... OT OK\\n} | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | functio ... OT OK\\n} | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ... .attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ... .attr | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ... .attr | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ... .attr | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ... .attr | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ... 'bar') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ... 'bar') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ... 'bar') | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ... 'bar') | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ... 'bar') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ... 'bar') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ... 'bar') | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ... 'bar') | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ... 'bar') | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ... 'bar') | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ... .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ... .html | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ... .html | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ... .html | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ... .html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | CalleeFlexibleAccessPath | selection.attr | | autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | @@ -12823,6 +96209,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | enclosingFunctionName | otherFunction | | autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | receiverName | selection | +| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | contextSurroundingFunctionParameters | (selection) | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | enclosingFunctionBody | selection selection attr foo bar html getTaint | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | enclosingFunctionName | otherFunction | +| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | fileImports | d3 | | autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | CalleeFlexibleAccessPath | selection.attr().html | | autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) | @@ -12830,6 +96231,255 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | enclosingFunctionBody | selection selection attr foo bar html getTaint | | autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | enclosingFunctionName | otherFunction | | autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | fileImports | d3 | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateFnsAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateTime | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DayJSAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | LuxonAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | MomentAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFns | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsEsm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsFp | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateformat | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:31 | import ... e-fns'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:31 | import ... e-fns'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:31 | import ... e-fns'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:1:21:1:30 | 'date-fns' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:1:21:1:30 | 'date-fns' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:1:21:1:30 | 'date-fns' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:2:1:2:36 | import ... ns/fp'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:2:1:2:36 | import ... ns/fp'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:2:1:2:36 | import ... ns/fp'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:2:23:2:35 | 'date-fns/fp' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:2:23:2:35 | 'date-fns/fp' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:2:23:2:35 | 'date-fns/fp' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:3:1:3:38 | import ... s/esm'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:3:1:3:38 | import ... s/esm'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:3:1:3:38 | import ... s/esm'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:3:24:3:37 | 'date-fns/esm' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:3:24:3:37 | 'date-fns/esm' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:3:24:3:37 | 'date-fns/esm' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:4:1:4:28 | import ... oment'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:4:1:4:28 | import ... oment'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:4:1:4:28 | import ... oment'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:4:20:4:27 | 'moment' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:4:20:4:27 | 'moment' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:4:20:4:27 | 'moment' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:5:1:5:36 | import ... ormat'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:5:1:5:36 | import ... ormat'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:5:1:5:36 | import ... ormat'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:5:24:5:35 | 'dateformat' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:5:24:5:35 | 'dateformat' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:5:24:5:35 | 'dateformat' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:7:10:7:13 | main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:7:10:7:13 | main | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:7:10:7:13 | main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent | | autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -12837,6 +96487,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring | | autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -12844,12 +96509,74 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is | stringConcatenatedWith | -endpoint- dateFns.format() | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ... taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ... taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ... taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ... taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ... taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ... taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ... taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | CalleeFlexibleAccessPath | dateFns.format | | autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | calleeImports | date-fns | @@ -12868,12 +96595,74 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | receiverName | dateFns | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is | stringConcatenatedWith | -endpoint- dateFnsEsm.format() | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ... taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ... taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ... taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ... taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ... taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ... taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ... taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | CalleeFlexibleAccessPath | dateFnsEsm.format | | autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | calleeImports | date-fns/esm | @@ -12892,12 +96681,84 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | receiverName | dateFnsEsm | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is | stringConcatenatedWith | -endpoint- dateFnsFp.format()() | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | CalleeFlexibleAccessPath | dateFnsFp.format | | autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | calleeImports | date-fns/fp | @@ -12915,12 +96776,74 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is | stringConcatenatedWith | -endpoint- dateFns.format() | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | CalleeFlexibleAccessPath | dateFns.format | | autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | calleeImports | date-fns | @@ -12939,12 +96862,84 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | receiverName | dateFns | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is | stringConcatenatedWith | -endpoint- dateFnsFp.format()() | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | CalleeFlexibleAccessPath | dateFnsFp.format | | autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | calleeImports | date-fns/fp | @@ -12962,12 +96957,79 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is | stringConcatenatedWith | -endpoint- moment().format() | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | | autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | CalleeFlexibleAccessPath | moment | | autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | calleeImports | moment | @@ -12976,6 +97038,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | CalleeFlexibleAccessPath | moment().format | | autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | calleeImports | moment | @@ -12984,12 +97051,79 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is | stringConcatenatedWith | -endpoint- moment().format() | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | stringConcatenatedWith | 'Time is ' -endpoint- | | autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | CalleeFlexibleAccessPath | moment | | autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | calleeImports | moment | @@ -12998,12 +97132,69 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is | stringConcatenatedWith | -endpoint- dateformat() | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ... taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ... taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ... taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ... taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ... taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ... taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ... taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | CalleeFlexibleAccessPath | dateformat | | autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | calleeImports | dateformat | @@ -13020,12 +97211,100 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import ... dayjs'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import ... dayjs'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import ... dayjs'; | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import ... dayjs'; | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import ... dayjs'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:20:23:20:29 | 'dayjs' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:20:23:20:29 | 'dayjs' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:20:23:20:29 | 'dayjs' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is | stringConcatenatedWith | -endpoint- dayjs().format() | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | CalleeFlexibleAccessPath | dayjs | | autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | calleeImports | dayjs | @@ -13034,6 +97313,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | +| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | enclosingFunctionName | main | +| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | CalleeFlexibleAccessPath | dayjs().format | | autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | calleeImports | dayjs | @@ -13042,6 +97326,171 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is dateFns format time taint document body innerHTML Time is dateFnsEsm format time taint document body innerHTML Time is dateFnsFp format taint time document body innerHTML Time is dateFns format taint time document body innerHTML Time is dateFnsFp format time taint document body innerHTML Time is moment time format taint document body innerHTML Time is moment taint format document body innerHTML Time is dateformat time taint dayjs dayjs document body innerHTML Time is dayjs time format taint | | autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | enclosingFunctionName | main | | autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:24:1:24:42 | import ... luxon"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:24:1:24:42 | import ... luxon"; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:24:1:24:42 | import ... luxon"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:24:26:24:41 | "@date-io/luxon" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:24:26:24:41 | "@date-io/luxon" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:24:26:24:41 | "@date-io/luxon" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:25:1:25:47 | import ... e-fns"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:25:1:25:47 | import ... e-fns"; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:25:1:25:47 | import ... e-fns"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:25:28:25:46 | "@date-io/date-fns" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:25:28:25:46 | "@date-io/date-fns" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:25:28:25:46 | "@date-io/date-fns" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:26:1:26:44 | import ... oment"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:26:1:26:44 | import ... oment"; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:26:1:26:44 | import ... oment"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:26:27:26:43 | "@date-io/moment" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:26:27:26:43 | "@date-io/moment" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:26:27:26:43 | "@date-io/moment" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:27:1:27:41 | import ... /dayjs" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:27:1:27:41 | import ... /dayjs" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:27:1:27:41 | import ... /dayjs" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:27:26:27:41 | "@date-io/dayjs" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:27:26:27:41 | "@date-io/dayjs" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:27:26:27:41 | "@date-io/dayjs" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:29:10:29:15 | dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:29:10:29:15 | dateio | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:29:10:29:15 | dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent | | autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -13049,6 +97498,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | | autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring | | autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -13056,12 +97520,199 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | | autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment ... apter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment ... apter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | | autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is | stringConcatenatedWith | -endpoint- dateFns.formatByString() | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ... taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ... taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ... taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | CalleeFlexibleAccessPath | dateFns.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | calleeImports | @date-io/date-fns | @@ -13071,6 +97722,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | receiverName | dateFns | +| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | CalleeFlexibleAccessPath | dateFns.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | calleeImports | @date-io/date-fns | @@ -13080,12 +97736,89 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | receiverName | dateFns | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | | autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is | stringConcatenatedWith | -endpoint- luxon.formatByString() | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ... taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ... taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ... taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | CalleeFlexibleAccessPath | luxon.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | calleeImports | @date-io/luxon | @@ -13095,6 +97828,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | receiverName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | CalleeFlexibleAccessPath | luxon.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | calleeImports | @date-io/luxon | @@ -13104,12 +97842,89 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | receiverName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | | autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is | stringConcatenatedWith | -endpoint- moment.formatByString() | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ... taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ... taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ... taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | CalleeFlexibleAccessPath | moment.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | calleeImports | @date-io/moment | @@ -13119,6 +97934,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | receiverName | moment | +| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | CalleeFlexibleAccessPath | moment.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | calleeImports | @date-io/moment | @@ -13128,12 +97948,84 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | receiverName | moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | | autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is | stringConcatenatedWith | -endpoint- dayjs.formatByString() | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ... taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ... taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ... taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ... taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ... taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ... taint) | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ... taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | CalleeFlexibleAccessPath | dayjs.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | calleeImports | @date-io/dayjs | @@ -13143,6 +98035,16 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | receiverName | dayjs | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is dateFns formatByString Date taint document body innerHTML Time is luxon formatByString luxon date taint document body innerHTML Time is moment formatByString moment date taint document body innerHTML Time is dayjs formatByString dayjs date taint | +| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | enclosingFunctionName | dateio | +| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | CalleeFlexibleAccessPath | dayjs.formatByString | | autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | calleeImports | @date-io/dayjs | @@ -13152,6 +98054,111 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | enclosingFunctionName | dateio | | autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | receiverName | dayjs | +| autogenerated/Xss/DomBasedXss/dates.js:43:1:43:33 | import ... luxon"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:43:1:43:33 | import ... luxon"; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:43:1:43:33 | import ... luxon"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:43:26:43:32 | "luxon" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:43:26:43:32 | "luxon" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:43:26:43:32 | "luxon" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:45:10:45:14 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:45:10:45:14 | luxon | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:45:10:45:14 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent | | autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -13159,6 +98166,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring | | autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -13166,12 +98188,109 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is | stringConcatenatedWith | -endpoint- DateTime.now().plus().toFormat() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | CalleeFlexibleAccessPath | DateTime.now().plus | | autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | calleeImports | luxon | @@ -13180,6 +98299,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | CalleeFlexibleAccessPath | DateTime.now().plus | | autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | InputAccessPathFromCallee | 0.years | | autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | InputArgumentIndex | 0 | @@ -13190,6 +98324,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | CalleeFlexibleAccessPath | DateTime.now().plus().toFormat | | autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | calleeImports | luxon | @@ -13198,12 +98337,99 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is | stringConcatenatedWith | -endpoint- DateTime().setLocale().toFormat() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | CalleeFlexibleAccessPath | DateTime().setLocale | | autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | calleeImports | luxon | @@ -13212,6 +98438,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | CalleeFlexibleAccessPath | DateTime().setLocale().toFormat | | autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | calleeImports | luxon | @@ -13220,12 +98451,104 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is | stringConcatenatedWith | -endpoint- DateTime.fromISO().startOf().toFormat() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | CalleeFlexibleAccessPath | DateTime.fromISO | | autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | calleeImports | luxon | @@ -13235,6 +98558,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | receiverName | DateTime | +| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | CalleeFlexibleAccessPath | DateTime.fromISO().startOf | | autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | calleeImports | luxon | @@ -13243,6 +98571,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | +| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | enclosingFunctionName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | CalleeFlexibleAccessPath | DateTime.fromISO().startOf().toFormat | | autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | calleeImports | luxon | @@ -13251,6 +98584,102 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is DateTime now plus years 1 toFormat taint document body innerHTML Time is DateTime setLocale fr toFormat taint document body innerHTML Time is DateTime fromISO 2020-01-01 startOf day toFormat taint | | autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | enclosingFunctionName | luxon | | autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:53:10:53:16 | dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:53:10:53:16 | dateio2 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:53:10:53:16 | dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent | | autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -13258,6 +98687,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring | | autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | @@ -13265,12 +98709,134 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment ... apter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment ... apter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is | stringConcatenatedWith | -endpoint- moment.addDays().format() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | CalleeFlexibleAccessPath | moment.addDays | | autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | calleeImports | @date-io/moment | @@ -13280,6 +98846,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | receiverName | moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | CalleeFlexibleAccessPath | moment.date | | autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | calleeImports | @date-io/moment | @@ -13298,6 +98869,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | receiverName | moment | +| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | CalleeFlexibleAccessPath | moment.addDays().format | | autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | calleeImports | @date-io/moment | @@ -13306,12 +98882,134 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is | stringConcatenatedWith | -endpoint- luxon.endOfDay().toFormat() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | CalleeFlexibleAccessPath | luxon.endOfDay | | autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | calleeImports | @date-io/luxon | @@ -13321,6 +99019,16 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | receiverName | luxon | +| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | CalleeFlexibleAccessPath | luxon.endOfDay().toFormat | | autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | calleeImports | @date-io/luxon | @@ -13329,12 +99037,129 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | | autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is | stringConcatenatedWith | -endpoint- dayjs.setHours().format() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint- | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | CalleeFlexibleAccessPath | dayjs.setHours | | autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | calleeImports | @date-io/dayjs | @@ -13344,6 +99169,16 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | receiverName | dayjs | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | CalleeFlexibleAccessPath | dayjs.setHours | | autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | calleeImports | @date-io/dayjs | @@ -13353,6 +99188,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | receiverName | dayjs | +| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() | +| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | +| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | enclosingFunctionName | dateio2 | +| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | | autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | CalleeFlexibleAccessPath | dayjs.setHours().format | | autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | calleeImports | @date-io/dayjs | @@ -13361,11 +99201,35 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is dayjs setHours dayjs date 4 format taint | | autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | enclosingFunctionName | dateio2 | | autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:0 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:1 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:1 | $ | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:1 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | $("#foo") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | exceptional return of $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | exceptional return of $("#foo") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:12 | $("#foo").on | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:12 | $("#foo").on | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:12 | $("#foo").on | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | $("#foo ... , drop) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | $("#foo ... , drop) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | $("#foo ... , drop) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | exceptional return of $("#foo ... , drop) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | exceptional return of $("#foo ... , drop) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | exceptional return of $("#foo ... , drop) | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:11:1:12 | on | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:11:1:12 | on | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:11:1:12 | on | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | CalleeFlexibleAccessPath | $().on | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13376,6 +99240,150 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | functio ... div);\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | functio ... div);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | functio ... div);\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text = ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text = ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text = ... plain') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text = ... plain') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text = ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | CalleeFlexibleAccessPath | dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13384,11 +99392,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | enclosingFunctionName | drop | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | receiverName | dataTransfer | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html = ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html = ... /html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html = ... /html') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html = ... /html') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html = ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | enclosingFunctionName | drop | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | CalleeFlexibleAccessPath | dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13397,6 +99440,121 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | enclosingFunctionName | drop | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | receiverName | dataTransfer | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13405,12 +99563,103 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | enclosingFunctionName | drop | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | receiverName | document | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | enclosingFunctionName | drop | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ... = text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ... = text | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ... = text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ... = text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ... = text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | assignedToPropName | textContent | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | enclosingFunctionName | drop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | CalleeFlexibleAccessPath | document.body.append | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13418,6 +99667,67 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | enclosingFunctionName | drop | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | functio ... })\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | functio ... })\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | functio ... })\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:17:22:23 | install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:17:22:23 | install | contextSurroundingFunctionParameters | (el) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:17:22:23 | install | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextSurroundingFunctionParameters | (el) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | contextSurroundingFunctionParameters | (el) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | contextSurroundingFunctionParameters | (el) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n }) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n }) | contextSurroundingFunctionParameters | (el) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n }) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n }) | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n }) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n }) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n }) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n }) | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n }) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | contextSurroundingFunctionParameters | (el) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | CalleeFlexibleAccessPath | el.addEventListener | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13426,6 +99736,11 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | receiverName | el | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) => ... \\n } | CalleeFlexibleAccessPath | el.addEventListener | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) => ... \\n } | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) => ... \\n } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13434,6 +99749,56 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) => ... \\n } | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) => ... \\n } | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) => ... \\n } | receiverName | el | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13441,6 +99806,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13448,6 +99833,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | contextSurroundingFunctionParameters | (el)\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | enclosingFunctionName | install | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13455,18 +99855,88 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | enclosingFunctionName | install | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:8 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:8 | document | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:8 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:25 | documen ... istener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:25 | documen ... istener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:25 | documen ... istener | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | documen ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | documen ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | documen ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:10:28:25 | addEventListener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:10:28:25 | addEventListener | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:10:28:25 | addEventListener | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | CalleeFlexibleAccessPath | document.addEventListener | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | receiverName | document | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) => ... OT OK\\n} | CalleeFlexibleAccessPath | document.addEventListener | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) => ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) => ... OT OK\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) => ... OT OK\\n} | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) => ... OT OK\\n} | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) => ... OT OK\\n} | receiverName | document | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13474,6 +99944,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | enclosingFunctionName | document.addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13481,6 +99971,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | enclosingFunctionName | document.addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | enclosingFunctionName | document.addEventListener#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13488,21 +99993,97 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | enclosingFunctionName | document.addEventListener#functionalargument | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:1 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:1 | $ | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:1 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | $("#foo") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | exceptional return of $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | exceptional return of $("#foo") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:14 | $("#foo").bind | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:14 | $("#foo").bind | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:14 | $("#foo").bind | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | $("#foo ... T OK\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:11:32:14 | bind | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:11:32:14 | bind | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:11:32:14 | bind | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | CalleeFlexibleAccessPath | $().bind | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | contextSurroundingFunctionParameters | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) => ... OT OK\\n} | CalleeFlexibleAccessPath | $().bind | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) => ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) => ... OT OK\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) => ... OT OK\\n} | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) => ... OT OK\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13510,6 +100091,31 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | enclosingFunctionName | bind#functionalargument | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13517,6 +100123,26 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | enclosingFunctionName | bind#functionalargument | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | enclosingFunctionName | bind#functionalargument | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | CalleeFlexibleAccessPath | e.originalEvent.dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13524,6 +100150,78 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | enclosingFunctionName | bind#functionalargument | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:2 | (functi ... }\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:2 | (functi ... }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:2 | (functi ... }\\n}) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | (functi ... }\\n})() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | (functi ... }\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | (functi ... }\\n})() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | exceptional return of (functi ... }\\n})() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | exceptional return of (functi ... }\\n})() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | exceptional return of (functi ... }\\n})() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | functio ... }\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | functio ... }\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | functio ... }\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13532,6 +100230,157 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | receiverName | document | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n } | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n } | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n } | assignedToPropName | ondrop | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n } | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n } | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n } | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text = ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text = ... plain') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text = ... plain') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text = ... plain') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text = ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | CalleeFlexibleAccessPath | dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13540,11 +100389,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | receiverName | dataTransfer | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html = ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html = ... /html') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html = ... /html') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html = ... /html') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html = ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | contextSurroundingFunctionParameters | ()\n(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | CalleeFlexibleAccessPath | dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13553,6 +100437,121 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | receiverName | dataTransfer | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13561,12 +100560,103 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | receiverName | document | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | contextSurroundingFunctionParameters | ()\n(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ... = text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ... = text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ... = text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ... = text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ... = text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | assignedToPropName | textContent | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | enclosingFunctionName | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | CalleeFlexibleAccessPath | document.body.append | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13574,11 +100664,292 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | enclosingFunctionName | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | async f ... ms;\\n } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | async f ... ms;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | async f ... ms;\\n } | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:16:58:26 | getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:16:58:26 | getDropData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:16:58:26 | getDropData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file = ... iles[i] | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file = ... iles[i] | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file = ... iles[i] | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file = ... iles[i] | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file = ... iles[i] | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.types.includes | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13586,6 +100957,56 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13593,6 +101014,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13601,12 +101062,72 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | receiverName | document | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | contextSurroundingFunctionParameters | (e) | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs = ... ('img') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs = ... ('img') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs = ... ('img') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs = ... ('img') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs = ... ('img') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | CalleeFlexibleAccessPath | container.getElementsByTagName | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13615,6 +101136,96 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | receiverName | container | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | CalleeFlexibleAccessPath | dropItems.add | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13623,6 +101234,51 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | receiverName | dropItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | CalleeFlexibleAccessPath | e.dataTransfer.types.includes | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13630,6 +101286,56 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | CalleeFlexibleAccessPath | e.dataTransfer.getData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13637,6 +101343,31 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | CalleeFlexibleAccessPath | ?.test | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13644,6 +101375,31 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | CalleeFlexibleAccessPath | dropItems.add | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13652,6 +101408,46 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | receiverName | dropItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | fileImports | | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | CalleeFlexibleAccessPath | Array.from | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | @@ -13660,12 +101456,106 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | enclosingFunctionName | getDropData | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | fileImports | | | autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | receiverName | Array | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | enclosingFunctionName | getDropData | +| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | functio ... // OK\\n} | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | functio ... // OK\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:10:1:13 | test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:10:1:13 | test | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:1:10:1:13 | test | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('') | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('') | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('') | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('') | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('') | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('') | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('') | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('') | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('') | fileImports | | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | 'click | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | 'click' | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:41 | 'click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:41 | '' | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '' | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '' | contextFunctionInterfaces | test() | @@ -13673,12 +101563,22 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '' | enclosingFunctionBody | loc window location href $ click | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '' | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '' | fileImports | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | fileImports | | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | contextFunctionInterfaces | test() | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | enclosingFunctionBody | loc window location href $ click | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | fileImports | | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | stringConcatenatedWith | 'click' | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | enclosingFunctionBody | loc window location href $ click | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | fileImports | | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | CalleeFlexibleAccessPath | encodeURIComponent | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | contextFunctionInterfaces | test() | @@ -13692,42 +101592,217 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click' | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click' | fileImports | | | autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click' | stringConcatenatedWith | 'A link | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:1:43 | this | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:1:43 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | assignedToPropName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... >' | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... >' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... >' | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... >' | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... >' | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | fileImports | | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '

    A link

    | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '

    A link

    ' | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:61 | '

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:61 | '

    ' | assignedToPropName | innerHTML | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '

    ' | contextFunctionInterfaces | onclick() | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '

    ' | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '

    ' | enclosingFunctionBody | parentNode innerHTML

    A link

    | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '

    ' | enclosingFunctionName | onclick | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '

    ' | fileImports | | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | fileImports | | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | contextFunctionInterfaces | onclick() | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | enclosingFunctionBody | parentNode innerHTML

    A link

    | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | enclosingFunctionName | onclick | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | fileImports | | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | stringConcatenatedWith | '

    A link

    ' | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | contextFunctionInterfaces | onclick() | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | enclosingFunctionBody | parentNode innerHTML

    A link

    | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | enclosingFunctionName | onclick | +| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | fileImports | | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link' | contextFunctionInterfaces | onclick() | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link' | contextSurroundingFunctionParameters | () | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link' | enclosingFunctionBody | parentNode innerHTML

    A link

    | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link' | enclosingFunctionName | onclick | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link' | fileImports | | | autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link' | stringConcatenatedWith | '

    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | functio ... OT OK\\n} | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | functio ... OT OK\\n} | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:1:10:1:13 | test | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:1:10:1:13 | test | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:1:10:1:13 | test | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | fileImports | | | autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | contextFunctionInterfaces | test() | @@ -13781,6 +102116,21 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | | autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | fileImports | | | autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | contextFunctionInterfaces | test() | @@ -13795,6 +102145,27 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | | autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | stringConcatenatedWith | -endpoint- tainted | | autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | contextFunctionInterfaces | test() | @@ -13802,12 +102173,38 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | | autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | stringConcatenatedWith | '.' -endpoint- | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("
    ") | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("
    ") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("
    ") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("
    ") | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("
    ") | fileImports | | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("
    ") | contextFunctionInterfaces | test() | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("
    ") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("
    ") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("
    ") | enclosingFunctionName | test | +| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("
    ") | fileImports | | | autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | | autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "
    ' | +| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:26 | "
    $ body html XSS: tainted $ window location hash $ location toString elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace # $ window location search replace ? $ hash replace ! $ hash replace blah $ hash blah $ blah hash $ hash | +| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:26 | "
    " | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "
    " | InputArgumentIndex | 0 | | autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "
    " | contextFunctionInterfaces | test() | @@ -13827,6 +102224,36 @@ tokenFeatures | autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | enclosingFunctionName | test | | autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | fileImports | | | autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | stringConcatenatedWith | '

  • ') | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... ') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... ') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... ') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... ') | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... ') | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... ') | contextSurroundingFunctionParameters | (files2)\n(file) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... ') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... ') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... ') | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | contextSurroundingFunctionParameters | (files2)\n(file) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '
  • ' | contextFunctionInterfaces | format(files2) | | autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '
  • ' | contextSurroundingFunctionParameters | (files2)\n(file) | | autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '
  • ' | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | @@ -22434,6 +148995,31 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '' | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '' | stringConcatenatedWith | '
  • ' + file -endpoint- | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | contextSurroundingFunctionParameters | (files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | contextSurroundingFunctionParameters | (files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | contextSurroundingFunctionParameters | (files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | contextSurroundingFunctionParameters | (files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | CalleeFlexibleAccessPath | files3.join | | autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | contextFunctionInterfaces | format(files2) | @@ -22442,6 +149028,31 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | receiverName | files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n }) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n }) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n }) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n }) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n }) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | CalleeFlexibleAccessPath | fs.readdir | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | calleeImports | fs | @@ -22451,6 +149062,36 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | receiverName | fs | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n } | CalleeFlexibleAccessPath | fs.readdir | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n } | InputArgumentIndex | 1 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n } | calleeImports | fs | @@ -22460,6 +149101,51 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n } | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n } | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n } | receiverName | fs | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | CalleeFlexibleAccessPath | res.write | | autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | contextFunctionInterfaces | format(files2) | @@ -22468,6 +149154,89 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | receiverName | res | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ... }) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ... }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ... }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ... }) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ... }) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ... }) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ... }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ... }) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ... }) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ... } | CalleeFlexibleAccessPath | files1.forEach | | autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ... } | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ... } | contextFunctionInterfaces | format(files2) | @@ -22476,6 +149245,46 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ... } | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ... } | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ... } | receiverName | files1 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | CalleeFlexibleAccessPath | files2.push | | autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | contextFunctionInterfaces | format(files2) | @@ -22484,6 +149293,31 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | receiverName | files2 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | CalleeFlexibleAccessPath | res.write | | autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | contextFunctionInterfaces | format(files2) | @@ -22492,6 +149326,68 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | receiverName | res | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 ... files2) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 ... files2) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 ... files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 ... files2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 ... files2) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | CalleeFlexibleAccessPath | format | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | InputArgumentIndex | 0 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | fileImports | express fs http | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | contextFunctionInterfaces | format(files2) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push
  • file
  • files3 join fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | enclosingFunctionName | http.createServer#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | CalleeFlexibleAccessPath | res.write | | autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | contextFunctionInterfaces | format(files2) | @@ -22500,30 +149396,167 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | enclosingFunctionName | http.createServer#functionalargument | | autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | fileImports | express fs http | | autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | receiverName | res | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:0 | this | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:0 | this | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | parseTorrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | require | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | require | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTo ... rrent') | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTo ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTo ... rrent') | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTorrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:28 | require | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:28 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:28 | require | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | exceptional return of require ... rrent') | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | exceptional return of require ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | exceptional return of require ... rrent') | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | require ... rrent') | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | require ... rrent') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | require ... rrent') | fileImports | express parse-torrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | CalleeFlexibleAccessPath | require | | autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | calleeImports | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | contextFunctionInterfaces | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | contextSurroundingFunctionParameters | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:13 | express | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:13 | express | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:13 | express | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express ... press') | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express ... press') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express ... press') | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:23 | require | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:23 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:23 | require | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | exceptional return of require('express') | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | exceptional return of require('express') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | exceptional return of require('express') | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | require('express') | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | require('express') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | require('express') | fileImports | express parse-torrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | CalleeFlexibleAccessPath | require | | autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | calleeImports | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | contextFunctionInterfaces | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | contextSurroundingFunctionParameters | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:7 | express | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:7 | express | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:7 | express | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | exceptional return of express() | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | exceptional return of express() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | exceptional return of express() | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | express() | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | express() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | express() | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:13 | express().get | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:13 | express().get | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:13 | express().get | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | exceptional return of express ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | exceptional return of express ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | exceptional return of express ... T OK\\n}) | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | express ... T OK\\n}) | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | express ... T OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | express ... T OK\\n}) | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:11:4:13 | get | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:11:4:13 | get | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:11:4:13 | get | fileImports | express parse-torrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | CalleeFlexibleAccessPath | express().get | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | calleeImports | express | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | contextFunctionInterfaces | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | contextSurroundingFunctionParameters | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | fileImports | express parse-torrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | express().get | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | calleeImports | express | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | contextFunctionInterfaces | | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) | | autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | fileImports | express parse-torrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | CalleeFlexibleAccessPath | parseTorrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | calleeImports | parse-torrent | @@ -22532,6 +149565,61 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | | autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | enclosingFunctionName | get#functionalargument | | autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | fileImports | express parse-torrent | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | contextFunctionInterfaces | | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | contextSurroundingFunctionParameters | (req, res) | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | enclosingFunctionName | get#functionalargument | +| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | fileImports | express parse-torrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | CalleeFlexibleAccessPath | res.send | | autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | InputArgumentIndex | 0 | | autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | contextFunctionInterfaces | | @@ -22540,6 +149628,106 @@ tokenFeatures | autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | enclosingFunctionName | get#functionalargument | | autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | fileImports | express parse-torrent | | autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | receiverName | res | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:1:0 | this | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:1:0 | this | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:9:3 | (functi ... OK\\n})) | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:9:3 | (functi ... OK\\n})) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:9:3 | (functi ... OK\\n})) | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | functio ... );\\n\\t}\\n} | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | functio ... );\\n\\t}\\n} | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | functio ... );\\n\\t}\\n} | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | exceptional return of functio ... / OK\\n}) | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | exceptional return of functio ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | exceptional return of functio ... / OK\\n}) | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | functio ... / OK\\n}) | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | functio ... / OK\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | functio ... / OK\\n}) | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof ... nction' | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof ... nction' | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof ... nction' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof ... nction' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof ... nction' | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof ... ine.amd | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof ... ine.amd | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof ... ine.amd | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof ... ine.amd | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof ... ine.amd | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | CalleeFlexibleAccessPath | define | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | contextFunctionInterfaces | myPlugin(stuff, options) | @@ -22548,14 +149736,24 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextSurroundingFunctionParameters | (factory) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextSurroundingFunctionParameters | (factory) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | CalleeFlexibleAccessPath | define | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | InputArgumentIndex | 1 | @@ -22564,12 +149762,88 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | CalleeFlexibleAccessPath | factory | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | InputArgumentIndex | 0 | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | contextSurroundingFunctionParameters | (factory) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | InputArgumentIndex | 0 | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("") | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("") | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("") | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("") | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("") | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("") | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "" | contextFunctionInterfaces | myPlugin(stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "" | contextSurroundingFunctionParameters | ($) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "" | enclosingFunctionBody | $ $ $ trim foo | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "" | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "" | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "" | stringConcatenatedWith | -endpoint- $.trim() + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | " ... ("foo") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | " ... ("foo") | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | " ... ("foo") | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | " ... ("foo") | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | " ... ("foo") | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | " ... /span>" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | " ... /span>" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | " ... /span>" | calleeImports | jquery | @@ -22578,12 +149852,32 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | " ... /span>" | enclosingFunctionBody | $ $ $ trim foo | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | " ... /span>" | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | " ... /span>" | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | contextFunctionInterfaces | myPlugin(stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | contextSurroundingFunctionParameters | ($) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | enclosingFunctionBody | $ $ $ trim foo | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | stringConcatenatedWith | '' -endpoint- '' | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | contextSurroundingFunctionParameters | ($) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | enclosingFunctionBody | $ $ $ trim foo | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | enclosingFunctionName | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | CalleeFlexibleAccessPath | $.trim | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | calleeImports | jquery | @@ -22599,6 +149893,98 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "" | enclosingFunctionName | | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "" | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "" | stringConcatenatedWith | '' + $.trim() -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:1 | $ | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:1 | $ | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:1 | $ | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:4 | $.fn | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:4 | $.fn | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:4 | $.fn | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:13 | $.fn.myPlugin | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:13 | $.fn.myPlugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:13 | $.fn.myPlugin | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:15:1 | $.fn.my ... OT OK\\n} | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:15:1 | $.fn.my ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:15:1 | $.fn.my ... OT OK\\n} | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:3:11:4 | fn | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:3:11:4 | fn | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:3:11:4 | fn | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:6:11:13 | myPlugin | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:6:11:13 | myPlugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:6:11:13 | myPlugin | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | assignedToPropName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | contextFunctionInterfaces | myPlugin(stuff, options) | @@ -22606,12 +149992,22 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "" | contextFunctionInterfaces | myPlugin(stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "" | contextSurroundingFunctionParameters | (stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "" | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "" | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "" | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "" | stringConcatenatedWith | -endpoint- options.foo + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | " ... ons.foo | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | " ... ons.foo | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | " ... ons.foo | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | " ... ons.foo | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | " ... ons.foo | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | " ... /span>" | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | " ... /span>" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | " ... /span>" | contextFunctionInterfaces | myPlugin(stuff, options) | @@ -22619,18 +150015,58 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | " ... /span>" | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | " ... /span>" | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | " ... /span>" | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | contextFunctionInterfaces | myPlugin(stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | contextSurroundingFunctionParameters | (stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | stringConcatenatedWith | '' -endpoint- '' | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "" | contextFunctionInterfaces | myPlugin(stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "" | contextSurroundingFunctionParameters | (stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "" | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "" | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "" | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "" | stringConcatenatedWith | '' + options.foo -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | contextFunctionInterfaces | myPlugin(stuff, options) | @@ -22638,12 +150074,22 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | fileImports | jquery jquery-ui | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "" | contextFunctionInterfaces | myPlugin(stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "" | contextSurroundingFunctionParameters | (stuff, options) | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "" | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "" | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "" | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "" | stringConcatenatedWith | -endpoint- stuff + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "" + stuff | contextFunctionInterfaces | myPlugin(stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "" + stuff | contextSurroundingFunctionParameters | (stuff, options) | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "" + stuff | enclosingFunctionBody | stuff options $ #foo html options foo $ #foo html stuff | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "" + stuff | enclosingFunctionName | myPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "" + stuff | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | " ... /span>" | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | " ... /span>" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | " ... /span>" | contextFunctionInterfaces | myPlugin(stuff, options) | @@ -22663,12 +150109,71 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "" | enclosingFunctionName | myPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "" | fileImports | jquery jquery-ui | | autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "" | stringConcatenatedWith | '' + stuff -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:1:1:0 | this | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | functio ... html;\\n} | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:17:1:26 | trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:17:1:26 | trivialXss | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:17:1:26 | trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html = ... /span>" | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html = ... /span>" | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html = ... /span>" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "" | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "" + s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "" + s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "" + s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "" + s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "" + s | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | " ... /span>" | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | " ... /span>" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | " ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | @@ -22686,6 +150191,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ... = html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ... = html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ... = html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ... = html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | contextFunctionInterfaces | trivialXss(s) | @@ -22694,18 +150234,82 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:1:1:0 | this | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:17:1:26 | trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:17:1:26 | trivialXss | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:17:1:26 | trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html = ... /span>" | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html = ... /span>" | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html = ... /span>" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "" | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "" + s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "" + s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "" + s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "" + s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "" + s | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | " ... /span>" | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | " ... /span>" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | " ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | @@ -22723,6 +150327,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ... = html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ... = html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ... = html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ... = html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | contextFunctionInterfaces | trivialXss(s) | @@ -22731,18 +150370,82 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:1:1:0 | this | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:17:1:26 | trivialXss | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:17:1:26 | trivialXss | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:17:1:26 | trivialXss | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html = ... /span>" | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html = ... /span>" | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html = ... /span>" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "" | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "" + s | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "" + s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "" + s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "" + s | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "" + s | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | " ... /span>" | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | " ... /span>" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | " ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | @@ -22760,6 +150463,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ... = html | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ... = html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ... = html | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ... = html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | contextFunctionInterfaces | trivialXss(s) | @@ -22768,18 +150506,119 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | contextFunctionInterfaces | trivialXss(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionName | trivialXss | +| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | contextFunctionInterfaces | trivialXss(s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionName | trivialXss | | autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:0 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:0 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | createHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | markdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | myMermaid | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | striptags | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:41 | module. ... ruction | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:41 | module. ... ruction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:41 | module. ... ruction | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:4:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:4:1 | module. ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:4:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:8:1:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:8:1:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:8:1:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:16:1:41 | xssThro ... ruction | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:16:1:41 | xssThro ... ruction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:16:1:41 | xssThro ... ruction | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | assignedToPropName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html = ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html = ... /span>" | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html = ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html = ... /span>" | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html = ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "" | enclosingFunctionName | xssThroughHTMLConstruction | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "" + s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "" + s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "" + s | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "" + s | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "" + s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | " ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | " ... /span>" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | " ... /span>" | enclosingFunctionBody | s html s document querySelector #html innerHTML html | @@ -22797,6 +150636,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "" | enclosingFunctionName | xssThroughHTMLConstruction | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ... = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ... = html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ... = html | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ... = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22805,12 +150679,119 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | enclosingFunctionName | xssThroughHTMLConstruction | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | enclosingFunctionBody | s html s document querySelector #html innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | enclosingFunctionName | xssThroughHTMLConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | enclosingFunctionBody | s html s document querySelector #html innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | enclosingFunctionName | xssThroughHTMLConstruction | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:35 | module. ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:35 | module. ... Parsing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:35 | module. ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:9:1 | module. ... ent);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:9:1 | module. ... ent);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:9:1 | module. ... ent);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:8:6:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:8:6:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:8:6:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:16:6:35 | xssThroughXMLParsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:16:6:35 | xssThroughXMLParsing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:16:6:35 | xssThroughXMLParsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | assignedToPropName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | CalleeFlexibleAccessPath | DOMParser().parseFromString | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22825,6 +150806,46 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | enclosingFunctionName | xssThroughXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22833,6 +150854,16 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | enclosingFunctionName | xssThroughXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | CalleeFlexibleAccessPath | document.querySelector().appendChild | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22840,6 +150871,113 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | enclosingFunctionName | xssThroughXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | enclosingFunctionName | xssThroughXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:46 | module. ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:46 | module. ... Parsing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:46 | module. ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:18:1 | module. ... tmp);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:18:1 | module. ... tmp);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:18:1 | module. ... tmp);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:8:11:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:8:11:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:8:11:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:16:11:46 | xssThro ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:16:11:46 | xssThro ... Parsing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:16:11:46 | xssThro ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | assignedToPropName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | CalleeFlexibleAccessPath | DOMParser().parseFromString | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22854,6 +150992,76 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | enclosingFunctionName | xssThroughMoreComplexXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | CalleeFlexibleAccessPath | document.createElement | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22862,6 +151070,46 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | enclosingFunctionName | xssThroughMoreComplexXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | CalleeFlexibleAccessPath | tmp.appendChild | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22870,6 +151118,51 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | enclosingFunctionName | xssThroughMoreComplexXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | receiverName | tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22878,6 +151171,11 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | enclosingFunctionName | xssThroughMoreComplexXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | CalleeFlexibleAccessPath | document.querySelector().appendChild | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22885,6 +151183,31 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdow ... true}) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdow ... true}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdow ... true}) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:24 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:24 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:24 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | exceptional return of require ... wn-it') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | exceptional return of require ... wn-it') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | exceptional return of require ... wn-it') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | require ... wn-it') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | require ... wn-it') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | require ... wn-it') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | exceptional return of require ... true}) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | exceptional return of require ... true}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | exceptional return of require ... true}) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | require ... true}) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | require ... true}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | require ... true}) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | CalleeFlexibleAccessPath | require | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | calleeImports | | @@ -22897,6 +151220,15 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:45 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:45 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:45 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | CalleeFlexibleAccessPath | import(!) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | InputAccessPathFromCallee | 0.html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | InputArgumentIndex | 0 | @@ -22905,11 +151237,103 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:33 | module. ... arkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:33 | module. ... arkdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:33 | module. ... arkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:24:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:24:1 | module. ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:24:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:8:21:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:8:21:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:8:21:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:16:21:33 | xssThroughMarkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:16:21:33 | xssThroughMarkdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:16:21:33 | xssThroughMarkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | assignedToPropName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html = ... nder(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html = ... nder(s) | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html = ... nder(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html = ... nder(s) | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html = ... nder(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | CalleeFlexibleAccessPath | markdown.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | calleeImports | markdown-it | @@ -22919,6 +151343,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | receiverName | markdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ... = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ... = html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ... = html | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ... = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22927,22 +151386,124 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | stripta ... ptags') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | stripta ... ptags') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | stripta ... ptags') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | striptags | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:25 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:25 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:25 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | exceptional return of require('striptags') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | exceptional return of require('striptags') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | exceptional return of require('striptags') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | require('striptags') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | require('striptags') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | require('striptags') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | CalleeFlexibleAccessPath | require | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | calleeImports | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:28 | module. ... zedHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:28 | module. ... zedHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:28 | module. ... zedHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:30:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:30:1 | module. ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:30:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:8:27:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:8:27:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:8:27:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:16:27:28 | sanitizedHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:16:27:28 | sanitizedHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:16:27:28 | sanitizedHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | assignedToPropName | sanitizedHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html = ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html = ... span>") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html = ... span>") | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html = ... span>") | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html = ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | @@ -22954,6 +151515,11 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "" | enclosingFunctionName | sanitizedHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "" + s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "" + s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "" + s | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "" + s | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "" + s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | @@ -22966,6 +151532,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "" | enclosingFunctionName | sanitizedHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ... = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ... = html | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ... = html | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ... = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -22974,24 +151575,182 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | enclosingFunctionName | sanitizedHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | enclosingFunctionName | sanitizedHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | enclosingFunctionBody | s html striptags s document querySelector #sanitized innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | enclosingFunctionName | sanitizedHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:17 | module.exports.ts | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:17 | module.exports.ts | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:17 | module.exports.ts | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:38 | module. ... typed") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:38 | module. ... typed") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:38 | module. ... typed") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:8:32:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:8:32:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:8:32:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:16:32:17 | ts | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:16:32:17 | ts | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:16:32:17 | ts | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:27 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:27 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:27 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | exceptional return of require("./typed") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | exceptional return of require("./typed") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | exceptional return of require("./typed") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | assignedToPropName | ts | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | CalleeFlexibleAccessPath | require | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | calleeImports | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:21 | module. ... .jquery | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:21 | module. ... .jquery | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:21 | module. ... .jquery | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:50 | module. ... lugin") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:50 | module. ... lugin") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:50 | module. ... lugin") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:8:34:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:8:34:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:8:34:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:16:34:21 | jquery | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:16:34:21 | jquery | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:16:34:21 | jquery | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:31 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:31 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:31 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | exceptional return of require ... lugin") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | exceptional return of require ... lugin") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | exceptional return of require ... lugin") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | assignedToPropName | jquery | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | CalleeFlexibleAccessPath | require | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | calleeImports | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:33 | module. ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:33 | module. ... Parsing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:33 | module. ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:38:1 | module. ... DOM.\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:38:1 | module. ... DOM.\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:38:1 | module. ... DOM.\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:8:36:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:8:36:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:8:36:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:16:36:33 | plainDOMXMLParsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:16:36:33 | plainDOMXMLParsing | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:16:36:33 | plainDOMXMLParsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ... DOM.\\n} | assignedToPropName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ... DOM.\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ... DOM.\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ... DOM.\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | enclosingFunctionName | plainDOMXMLParsing | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | CalleeFlexibleAccessPath | DOMParser().parseFromString | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23006,6 +151765,153 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | enclosingFunctionName | plainDOMXMLParsing | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | class F ... }\\n\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | class F ... }\\n\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | class F ... }\\n\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:41:15 | constructor | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:41:15 | constructor | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:41:15 | constructor | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n ... ;\\n } | assignedToPropName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n ... ;\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n ... ;\\n } | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n ... ;\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | assignedToPropName | step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | enclosingFunctionBody | s step s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | enclosingFunctionName | constructor | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:45:9 | doXss | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:45:9 | doXss | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:45:9 | doXss | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n ... K\\n } | assignedToPropName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n ... K\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n ... K\\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n ... K\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23014,30 +151920,270 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | enclosingFunctionName | doXss | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "" | contextSurroundingFunctionParameters | () | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "" | enclosingFunctionBody | document querySelector #class innerHTML step | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "" | enclosingFunctionName | doXss | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "" | stringConcatenatedWith | -endpoint- this.step + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "" + this.step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "" + this.step | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "" + this.step | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "" + this.step | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "" + this.step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | " ... /span>" | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | " ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | " ... /span>" | contextSurroundingFunctionParameters | () | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | " ... /span>" | enclosingFunctionBody | document querySelector #class innerHTML step | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | " ... /span>" | enclosingFunctionName | doXss | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | " ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | contextSurroundingFunctionParameters | () | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | enclosingFunctionBody | document querySelector #class innerHTML step | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | enclosingFunctionName | doXss | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | stringConcatenatedWith | '' -endpoint- '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | enclosingFunctionBody | document querySelector #class innerHTML step | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | enclosingFunctionName | doXss | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "" | contextSurroundingFunctionParameters | () | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "" | enclosingFunctionBody | document querySelector #class innerHTML step | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "" | enclosingFunctionName | doXss | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "" | stringConcatenatedWith | '' + this.step -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:27 | module. ... esClass | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:27 | module. ... esClass | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:27 | module. ... esClass | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:54:1 | module. ... o(s);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:54:1 | module. ... o(s);\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:54:1 | module. ... o(s);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:8:52:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:8:52:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:8:52:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:16:52:27 | createsClass | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:16:52:27 | createsClass | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:16:52:27 | createsClass | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | assignedToPropName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | CalleeFlexibleAccessPath | Foo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | InputArgumentIndex | 0 | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | enclosingFunctionBody | s Foo s | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | enclosingFunctionName | createsClass | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:1 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:1 | $ | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:1 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:4 | $.fn | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:4 | $.fn | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:4 | $.fn | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:14 | $.fn.xssPlugin | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:14 | $.fn.xssPlugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:14 | $.fn.xssPlugin | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:64:1 | $.fn.xs ... });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:64:1 | $.fn.xs ... });\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:64:1 | $.fn.xs ... });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:3:56:4 | fn | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:3:56:4 | fn | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:3:56:4 | fn | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:6:56:14 | xssPlugin | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:6:56:14 | xssPlugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:6:56:14 | xssPlugin | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ... });\\n} | assignedToPropName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ... });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ... });\\n} | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ... });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n } | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n } | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n } | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n ... "\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n ... "\\n } | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n ... "\\n } | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n ... "\\n } | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n ... "\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | assignedToPropName | name | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23054,6 +152200,51 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | enclosingFunctionName | xssPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | receiverName | $ | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n }) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n }) | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n }) | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n }) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n }) | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | contextSurroundingFunctionParameters | (options) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n } | CalleeFlexibleAccessPath | this.each | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n } | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23061,12 +152252,52 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n } | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n } | enclosingFunctionName | xssPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("" ... "") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("" ... "") | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("" ... "") | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("" ... "") | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("" ... "") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("" ... "") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("" ... "") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("" ... "") | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("" ... "") | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("" ... "") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("" ... ppendTo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("" ... ppendTo | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("" ... ppendTo | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("" ... ppendTo | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("" ... ppendTo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("" ... o(this) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("" ... o(this) | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("" ... o(this) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("" ... o(this) | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("" ... o(this) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("" ... o(this) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("" ... o(this) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("" ... o(this) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("" ... o(this) | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("" ... o(this) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "" | contextSurroundingFunctionParameters | (options)\n() | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "" | enclosingFunctionName | xssPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "" | stringConcatenatedWith | -endpoint- settings.name + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "" + ... gs.name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "" + ... gs.name | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "" + ... gs.name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "" + ... gs.name | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "" + ... gs.name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "" + ... "" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "" + ... "" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "" + ... "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23074,18 +152305,33 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "" + ... "" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "" + ... "" | enclosingFunctionName | xssPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "" + ... "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | contextSurroundingFunctionParameters | (options)\n() | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | enclosingFunctionName | xssPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | stringConcatenatedWith | '' -endpoint- '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "" | contextSurroundingFunctionParameters | (options)\n() | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "" | enclosingFunctionName | xssPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "" | stringConcatenatedWith | '' + settings.name -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | contextSurroundingFunctionParameters | (options)\n() | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | enclosingFunctionName | xssPlugin | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | CalleeFlexibleAccessPath | $().appendTo | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23093,6 +152339,93 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ settings name appendTo | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | enclosingFunctionName | xssPlugin | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:21 | module. ... .guards | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:21 | module. ... .guards | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:21 | module. ... .guards | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:72:1 | module. ... }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:72:1 | module. ... }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:72:1 | module. ... }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:8:66:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:8:66:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:8:66:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:16:66:21 | guards | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:16:66:21 | guards | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:16:66:21 | guards | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ... }\\n} | assignedToPropName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ... }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ... }\\n} | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ... }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ... "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ... "\\"/>" | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ... "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ... "\\"/>" | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ... "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23101,12 +152434,22 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "\\"" document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "\\""' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:69 | " attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:69 | "" | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "" | contextSurroundingFunctionParameters | (attrVal) | @@ -23125,6 +152468,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | stringConcatenatedWith | '' + attrVal -endpoint-  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | contextSurroundingFunctionParameters | (attrVal) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt= document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ... "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ... "\\"/>" | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ... "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ... "\\"/>" | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ... "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23133,24 +152511,54 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "\\"" document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "\\""' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:89 | " attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:89 | "" | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "" | contextSurroundingFunctionParameters | (attrVal) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "" | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | contextSurroundingFunctionParameters | (attrVal) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | stringConcatenatedWith | '' -endpoint- '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | CalleeFlexibleAccessPath | attrVal.replace | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23173,6 +152581,36 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | stringConcatenatedWith | '' + attrVal.replace() -endpoint-  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | contextSurroundingFunctionParameters | (attrVal) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt= document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ... === -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ... === -1 | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ... === -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ... === -1 | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ... === -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ... === -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ... === -1 | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ... === -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ... === -1 | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ... === -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | CalleeFlexibleAccessPath | attrVal.indexOf | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23181,6 +152619,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | receiverName | attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ... === -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ... === -1 | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ... === -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ... === -1 | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ... === -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | CalleeFlexibleAccessPath | attrVal.indexOf | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23189,6 +152662,51 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | receiverName | attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ... "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ... "\\"/>" | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ... "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ... "\\"/>" | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ... "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23197,12 +152715,22 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | contextSurroundingFunctionParameters | (attrVal) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML  attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | enclosingFunctionName | guards | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "\\"" document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "\\""' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:73 | " attrVal document querySelector #id innerHTML  attrVal replace / attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML  attrVal | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:73 | "" | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "" | contextSurroundingFunctionParameters | (attrVal) | @@ -23221,29 +152749,146 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | enclosingFunctionName | guards | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | stringConcatenatedWith | '' + attrVal -endpoint-  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:6 | module | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:14 | module.exports | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:34 | module. ... emplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:34 | module. ... emplate | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:34 | module. ... emplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:77:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:77:1 | module. ... html;\\n} | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:77:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:8:74:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:8:74:14 | exports | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:8:74:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:16:74:34 | intentionalTemplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:16:74:34 | intentionalTemplate | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:16:74:34 | intentionalTemplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | assignedToPropName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (obj) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextSurroundingFunctionParameters | (obj) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | contextSurroundingFunctionParameters | (obj) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | contextSurroundingFunctionParameters |  |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | enclosingFunctionName | intentionalTemplate |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
+| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html =  ... /span>" | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html = ... /span>" | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html = ... /span>" | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html = ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "" | contextSurroundingFunctionParameters | (obj) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "" | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "" | enclosingFunctionName | intentionalTemplate | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "" | stringConcatenatedWith | -endpoint- obj.spanTemplate + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | " ... emplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | " ... emplate | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | " ... emplate | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | " ... emplate | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | " ... emplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | " ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | " ... /span>" | contextSurroundingFunctionParameters | (obj) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | " ... /span>" | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | " ... /span>" | enclosingFunctionName | intentionalTemplate | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | " ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | contextSurroundingFunctionParameters | (obj) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | enclosingFunctionName | intentionalTemplate | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | stringConcatenatedWith | '' -endpoint- '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "" | contextSurroundingFunctionParameters | (obj) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "" | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "" | enclosingFunctionName | intentionalTemplate | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "" | stringConcatenatedWith | '' + obj.spanTemplate -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ... = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ... = html | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ... = html | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ... = html | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ... = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23252,12 +152897,129 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | enclosingFunctionName | intentionalTemplate | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | contextSurroundingFunctionParameters | (obj) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | enclosingFunctionName | intentionalTemplate | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | contextSurroundingFunctionParameters | (obj) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | enclosingFunctionBody | obj html obj spanTemplate document querySelector #template innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | enclosingFunctionName | intentionalTemplate | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:20 | module.exports.types | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:20 | module.exports.types | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:20 | module.exports.types | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:87:1 | module. ... }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:87:1 | module. ... }\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:87:1 | module. ... }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:8:79:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:8:79:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:8:79:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:16:79:20 | types | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:16:79:20 | types | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:16:79:20 | types | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ... }\\n} | assignedToPropName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ... }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ... }\\n} | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ... }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof ... string" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof ... string" | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof ... string" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof ... string" | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof ... string" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23265,12 +153027,22 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "" | contextSurroundingFunctionParameters | (val) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "" | stringConcatenatedWith | -endpoint- val + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "" + val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "" + val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "" + val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "" + val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "" + val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | " ... /span>" | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | " ... /span>" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | " ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23290,6 +153062,66 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "" | stringConcatenatedWith | '' + val -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof ... number" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof ... number" | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof ... number" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof ... number" | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof ... number" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23297,12 +153129,22 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "" | contextSurroundingFunctionParameters | (val) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "" | stringConcatenatedWith | -endpoint- val + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "" + val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "" + val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "" + val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "" + val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "" + val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | " ... /span>" | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | " ... /span>" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | " ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23322,6 +153164,61 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "" | stringConcatenatedWith | '' + val -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof ... oolean" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof ... oolean" | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof ... oolean" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof ... oolean" | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof ... oolean" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23329,12 +153226,22 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "" | contextSurroundingFunctionParameters | (val) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "" | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "" | stringConcatenatedWith | -endpoint- val + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "" + val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "" + val | contextSurroundingFunctionParameters | (val) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "" + val | enclosingFunctionBody | val val string $ #foo html val val number $ #foo html val val boolean $ #foo html val | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "" + val | enclosingFunctionName | types | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "" + val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | " ... /span>" | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | " ... /span>" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | " ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23354,12 +153261,62 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "" | enclosingFunctionName | types | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "" | stringConcatenatedWith | '' + val -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | functio ... OT OK\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | functio ... OT OK\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "" | contextSurroundingFunctionParameters | (x) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "" | enclosingFunctionBody | x x | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "" | enclosingFunctionName | createHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "" | stringConcatenatedWith | -endpoint- x + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "" + x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "" + x | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "" + x | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "" + x | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "" + x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | " ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | " ... /span>" | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | " ... /span>" | enclosingFunctionBody | x x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | " ... /span>" | enclosingFunctionName | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | " ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | contextSurroundingFunctionParameters | (x) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | enclosingFunctionBody | x x | @@ -23372,10 +153329,93 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "" | enclosingFunctionName | createHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "" | stringConcatenatedWith | '' + x -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:29 | module. ... ateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:29 | module. ... ateHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:29 | module. ... ateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:95:1 | module. ... (x));\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:95:1 | module. ... (x));\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:95:1 | module. ... (x));\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:8:93:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:8:93:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:8:93:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:16:93:29 | usesCreateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:16:93:29 | usesCreateHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:16:93:29 | usesCreateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | assignedToPropName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | contextSurroundingFunctionParameters | (x) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23383,6 +153423,16 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | enclosingFunctionBody | x $ #foo html createHTML x | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23390,16 +153440,125 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | enclosingFunctionBody | x $ #foo html createHTML x | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | CalleeFlexibleAccessPath | createHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | InputArgumentIndex | 0 | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | enclosingFunctionBody | x $ #foo html createHTML x | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMerma ... rmaid') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMerma ... rmaid') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMerma ... rmaid') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMermaid | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:25 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:25 | require | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:25 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | exceptional return of require('mermaid') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | exceptional return of require('mermaid') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | exceptional return of require('mermaid') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | require('mermaid') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | require('mermaid') | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | require('mermaid') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | CalleeFlexibleAccessPath | require | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | calleeImports | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | contextSurroundingFunctionParameters | | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:29 | module. ... ateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:29 | module. ... ateHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:29 | module. ... ateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:114:1 | module. ... });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:114:1 | module. ... });\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:114:1 | module. ... });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:8:98:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:8:98:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:8:98:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:16:98:29 | usesCreateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:16:98:29 | usesCreateHTML | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:16:98:29 | usesCreateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ... });\\n} | assignedToPropName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ... });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ... });\\n} | contextSurroundingFunctionParameters | (x) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ... });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n }) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n }) | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n }) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | CalleeFlexibleAccessPath | myMermaid.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | calleeImports | mermaid | @@ -23418,6 +153577,21 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | receiverName | myMermaid | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | myMermaid.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n } | InputArgumentIndex | 2 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n } | calleeImports | mermaid | @@ -23427,6 +153601,51 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n } | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n } | receiverName | myMermaid | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23434,6 +153653,11 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23441,6 +153665,36 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23448,6 +153702,26 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23455,6 +153729,11 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | CalleeFlexibleAccessPath | myMermaid.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | calleeImports | mermaid | @@ -23473,6 +153752,31 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | receiverName | myMermaid | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n }) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n }) | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n }) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | CalleeFlexibleAccessPath | mermaid.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23489,6 +153793,21 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | receiverName | mermaid | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ... \\n } | CalleeFlexibleAccessPath | mermaid.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ... \\n } | InputArgumentIndex | 2 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ... \\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23497,6 +153816,51 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ... \\n } | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ... \\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ... \\n } | receiverName | mermaid | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23504,6 +153868,11 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23511,6 +153880,36 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23518,6 +153917,26 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23525,6 +153944,11 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | CalleeFlexibleAccessPath | mermaid.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23541,6 +153965,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | receiverName | mermaid | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n }) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n }) | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n }) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | contextSurroundingFunctionParameters | (x) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | CalleeFlexibleAccessPath | mermaid.mermaidAPI.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23555,6 +154014,21 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n } | CalleeFlexibleAccessPath | mermaid.mermaidAPI.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n } | InputArgumentIndex | 2 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23562,6 +154036,51 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n } | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n } | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23569,6 +154088,11 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | contextSurroundingFunctionParameters | (x)\n(svg) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | enclosingFunctionName | usesCreateHTML | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23576,11 +154100,103 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | enclosingFunctionName | usesCreateHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:6 | module | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:14 | module.exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:33 | module. ... arkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:33 | module. ... arkdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:33 | module. ... arkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:119:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:119:1 | module. ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:119:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:8:116:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:8:116:14 | exports | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:8:116:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:16:116:33 | xssThroughMarkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:16:116:33 | xssThroughMarkdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:16:116:33 | xssThroughMarkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | assignedToPropName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html = ... nder(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html = ... nder(s) | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html = ... nder(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html = ... nder(s) | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html = ... nder(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | CalleeFlexibleAccessPath | markdown.render | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | calleeImports | markdown-it | @@ -23590,6 +154206,41 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | receiverName | markdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ... = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ... = html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ... = html | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ... = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | CalleeFlexibleAccessPath | document.querySelector | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | @@ -23598,18 +154249,85 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | receiverName | document | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | enclosingFunctionName | xssThroughMarkdown | +| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | enclosingFunctionName | xssThroughMarkdown | | autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:0 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:1 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:1 | id | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:1 | id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | functio ... html;\\n} | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:17:1:37 | basicHt ... ruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:17:1:37 | basicHt ... ruction | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:17:1:37 | basicHt ... ruction | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html = ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html = ... /span>" | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html = ... /span>" | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html = ... /span>" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "" | enclosingFunctionBody | s html s document body innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "" | enclosingFunctionName | basicHtmlConstruction | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "" + s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "" + s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "" + s | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "" + s | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "" + s | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | " ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | " ... /span>" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | " ... /span>" | enclosingFunctionBody | s html s document body innerHTML html | @@ -23627,12 +154345,128 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "" | enclosingFunctionName | basicHtmlConstruction | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ... = html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ... = html | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ... = html | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ... = html | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ... = html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | enclosingFunctionBody | s html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | enclosingFunctionName | basicHtmlConstruction | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | enclosingFunctionBody | s html s document body innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | enclosingFunctionName | basicHtmlConstruction | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | functio ... ENCY]\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | functio ... ENCY]\\n} | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:17:6:41 | insertI ... ocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:17:6:41 | insertI ... ocument | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:17:6:41 | insertI ... ocument | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc ... ent("") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc ... ent("") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc ... ent("") | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc ... ent("") | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc ... ent("") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | CalleeFlexibleAccessPath | document.implementation.createHTMLDocument | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | @@ -23640,12 +154474,47 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | enclosingFunctionName | insertIntoCreatedDocument | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "" | contextSurroundingFunctionParameters | (s) | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "" | enclosingFunctionName | insertIntoCreatedDocument | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "" + s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "" + s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "" + s | enclosingFunctionBody | s newDoc document implementation createHTMLDocument newDoc body innerHTML s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "" + s | enclosingFunctionName | insertIntoCreatedDocument | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "" + s | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | " ... /span>" | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | " ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | " ... /span>" | contextSurroundingFunctionParameters | (s) | @@ -23664,12 +154533,145 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "" | enclosingFunctionName | insertIntoCreatedDocument | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | enclosingFunctionBody | s s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | enclosingFunctionName | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | enclosingFunctionBody | s s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | enclosingFunctionName | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | enclosingFunctionBody | s s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | enclosingFunctionName | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | functio ... rn s;\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | functio ... rn s;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | functio ... rn s;\\n} | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | enclosingFunctionBody | s s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | enclosingFunctionName | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionBody | s s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionBody | s s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionName | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionName | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | contextSurroundingFunctionParameters | (s) | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | enclosingFunctionBody | s s | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | enclosingFunctionName | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | functio ... html;\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | functio ... html;\\n} | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:17:15:29 | notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:17:15:29 | notVulnerable | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:17:15:29 | notVulnerable | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | CalleeFlexibleAccessPath | id | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | InputArgumentIndex | 0 | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html = ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html = ... /span>" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html = ... /span>" | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html = ... /span>" | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html = ... /span>" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "" | contextSurroundingFunctionParameters | () | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "" | enclosingFunctionBody | s id x html s document body innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "" | enclosingFunctionName | notVulnerable | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "" | stringConcatenatedWith | -endpoint- s + '' | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "" + s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "" + s | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "" + s | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "" + s | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "" + s | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | " ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | " ... /span>" | contextSurroundingFunctionParameters | () | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | " ... /span>" | enclosingFunctionBody | s id x html s document body innerHTML html | @@ -23687,132 +154689,839 @@ tokenFeatures | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "" | enclosingFunctionName | notVulnerable | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "" | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "" | stringConcatenatedWith | '' + s -endpoint- | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ... = html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ... = html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ... = html | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ... = html | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ... = html | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | fileImports | | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | enclosingFunctionBody | s id x html s document body innerHTML html | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | enclosingFunctionName | notVulnerable | +| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | fileImports | | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | assignedToPropName | innerHTML | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | contextSurroundingFunctionParameters | () | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | enclosingFunctionBody | s id x html s document body innerHTML html | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | enclosingFunctionName | notVulnerable | | autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:1:0 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:1:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:1:0 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:195:2 | (functi ... \\n\\t};\\n}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:195:2 | (functi ... \\n\\t};\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:195:2 | (functi ... \\n\\t};\\n}) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | functio ... ;\\n\\t};\\n} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | functio ... ;\\n\\t};\\n} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | functio ... ;\\n\\t};\\n} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target ... .target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target ... .target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target ... .target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof ... string" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof ... string" | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof ... string" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof ... string" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof ... efined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof ... efined" | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof ... efined" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof ... efined" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof ... efined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof ... efined" | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof ... efined" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof ... efined" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | assignedToPropName | $element | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | contextSurroundingFunctionParameters | ()\n(element, options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | assignedToPropName | options | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23827,42 +155536,546 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | assignedToPropName | $parent | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | contextSurroundingFunctionParameters | ()\n(element, options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | contextSurroundingFunctionParameters | ()\n(element, options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | CalleeFlexibleAccessPath | $().appendTo | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | stringConcatenatedWith | -endpoint- options.target | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | stringConcatenatedWith | '#' -endpoint- | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ... OK\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ... OK\\n\\t\\t} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ... OK\\n\\t\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ... OK\\n\\t\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o ... ({}, o) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o ... ({}, o) | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o ... ({}, o) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o ... ({}, o) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | assignedToPropName | o | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23877,6 +156090,58 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | CalleeFlexibleAccessPath | console.log | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23884,12 +156149,143 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | receiverName | console | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | contextSurroundingFunctionParameters | (o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | contextSurroundingFunctionParameters | (o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | CalleeFlexibleAccessPath | f | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | InputArgumentIndex | 0 | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target ... .target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target ... .target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target ... .target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | CalleeFlexibleAccessPath | safe.has | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23897,12 +156293,113 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | receiverName | safe | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23910,6 +156407,18 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '
    ' | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '
    ' | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '
    ' | InputAccessPathFromCallee | 0.menu | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '
    ' | InputArgumentIndex | 0 | @@ -23918,6 +156427,18 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '
    ' | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '
    ' | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '
    ' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | InputAccessPathFromCallee | 0.target | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | InputArgumentIndex | 0 | @@ -23933,18 +156454,218 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | assignedToPropName | defaults | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '
    ' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '
    ' | assignedToPropName | menu | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '
    ' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '
    ' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '
    ' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '
    ' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | assignedToPropName | target | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23952,6 +156673,18 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | InputArgumentIndex | 1 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23959,6 +156692,18 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | InputArgumentIndex | 2 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23966,24 +156711,180 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23991,6 +156892,10 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | InputArgumentIndex | 1 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | @@ -23998,6 +156903,30 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | receiverName | $ | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ... OK\\n\\t\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ... OK\\n\\t\\t} | CalleeFlexibleAccessPath | $.extend | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ... OK\\n\\t\\t} | InputAccessPathFromCallee | 1.my_plugin | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ... OK\\n\\t\\t} | InputArgumentIndex | 1 | @@ -24006,159 +156935,1042 @@ tokenFeatures | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ... OK\\n\\t\\t} | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ... OK\\n\\t\\t} | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ... OK\\n\\t\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | assignedToPropName | affix | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | assignedToPropName | tooltip | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | assignedToPropName | my_plugin | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... ` | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... ` | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `
    hello
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `
    hello
    ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `
    hello
    ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `
    hello
    ` | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 |
    hello
    | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 |
    hello
    | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 |
    hello
    | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 |
    hello
    | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 |
    hello
    | stringConcatenatedWith | -endpoint- | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... ` | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `
    $ ...
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `
    $ ...
    ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `
    $ ...
    ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `
    $ ...
    ` | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 |
    | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 |
    | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 |
    | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 |
    | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 |
    | stringConcatenatedWith | -endpoint- options.target + '
    ' | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | stringConcatenatedWith | '
    ' -endpoint- '
    ' | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 |
    | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 |
    | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 |
    | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 |
    | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 | | stringConcatenatedWith | '
    ' + options.target -endpoint- | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ...
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ... ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ... ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ... ` | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `
    ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `
    ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `
    ` | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `
    ` ...
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `
    ` ...
    ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `
    ` ...
    ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `
    ` ...
    ` | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 |
    | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 |
    | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 |
    | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 |
    | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 |
    | stringConcatenatedWith | -endpoint- ? | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ...
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ...
    ` | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ...
    ` | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ...
    ` | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ...
    ` | stringConcatenatedWith | '
    ' -endpoint- | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `
    ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `
    ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `
    ` | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 |
    | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 | | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 | | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 | | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | InputArgumentIndex | 0 | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... ` | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | contextSurroundingFunctionParameters | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | fileImports | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `
    ` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `
    ` | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `
    ` | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `
    ` | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:24:149:35 |
    ' | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | stringConcatenatedWith | '
    ' | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | contextSurroundingFunctionParameters | ()\n(options) | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | enclosingFunctionName | | +| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | ">
    | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | ">
    | contextSurroundingFunctionParameters | ()\n(options) | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | ">
    | enclosingFunctionName | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | ">
    | fileImports | | | autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | "> | stringConcatenatedWith | '
    \\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:4:7:20:1 | FormikB ... /div>\\n) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:4:7:20:1 | FormikB ... /div>\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | () => ( ... /div>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | () => ( ... /div>\\n) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | () => ( ... /div>\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n < ... /div>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n < ... /div>\\n) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n < ... /div>\\n) | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n < ... /div>\\n) | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n < ... /div>\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 |
    \\n ...
    | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 |
    \\n ...
    | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 |
    \\n ...
    | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 |
    \\n ...
    | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 |
    \\n ...
    | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | assignedToPropName | initialValues | +| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | assignedToPropName | email | +| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | assignedToPropName | password | +| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ... }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values ... } | assignedToPropName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values ... } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values ... } | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values ... } | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values ... } | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values ... } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24249,6 +158851,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | | autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | enclosingFunctionName | FormikBasic | | autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24256,6 +158868,112 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | | autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | enclosingFunctionName | FormikBasic | | autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ... }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ... } | assignedToPropName | onSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ... } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ... } | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ... } | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ... } | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ... } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24263,6 +158981,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | | autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | enclosingFunctionName | FormikBasic | | autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24270,12 +158998,128 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | | autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | enclosingFunctionName | FormikBasic | | autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | contextSurroundingFunctionParameters | ()\n(values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ... ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ... ) | contextSurroundingFunctionParameters | ()\n(inputs) | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ... ) | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ... ) | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ... ) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | contextSurroundingFunctionParameters | ()\n(inputs) | +| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n ... ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n ... ) | contextSurroundingFunctionParameters | ()\n(inputs) | +| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n ... ) | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n ... ) | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n ... ) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 |
    | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | | contextSurroundingFunctionParameters | ()\n(inputs) | +| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | contextSurroundingFunctionParameters | ()\n(inputs) | +| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | contextSurroundingFunctionParameters | ()\n(inputs) | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | assignedToPropName | onSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | contextSurroundingFunctionParameters | ()\n(inputs) | +| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n | enclosingFunctionBody | div \n Formik initialValues email password validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n inputs form onSubmit handleSubmit \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n | enclosingFunctionName | FormikBasic | +| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:22:7:22:20 | FormikEnhanced | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:22:7:22:20 | FormikEnhanced | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:22:7:22:20 | FormikEnhanced | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:22:7:31:10 | FormikE ... MyForm) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:22:7:31:10 | FormikE ... MyForm) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:22:7:31:10 | FormikE ... MyForm) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:22:33 | withFormik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:22:33 | withFormik | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:22:33 | withFormik | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | exceptional return of withFor ... }\\n}) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | exceptional return of withFor ... }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | exceptional return of withFor ... }\\n}) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | withFor ... }\\n}) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | withFor ... }\\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | withFor ... }\\n}) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | exceptional return of withFor ... MyForm) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | exceptional return of withFor ... MyForm) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | exceptional return of withFor ... MyForm) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | withFor ... MyForm) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | withFor ... MyForm) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | withFor ... MyForm) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n m ... }\\n} | CalleeFlexibleAccessPath | withFormik | | autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n m ... }\\n} | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n m ... }\\n} | calleeImports | formik | | autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n m ... }\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | | autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n m ... }\\n} | contextSurroundingFunctionParameters | | | autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n m ... }\\n} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:20 | mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:20 | mapPropsToValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:20 | mapPropsToValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | CalleeFlexibleAccessPath | withFormik | | autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | InputAccessPathFromCallee | 0.mapPropsToValues | | autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | InputArgumentIndex | 0 | @@ -24284,6 +159128,81 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | | autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | contextSurroundingFunctionParameters | () | | autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | assignedToPropName | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | enclosingFunctionBody | name | +| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | enclosingFunctionName | mapPropsToValues | +| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:24:12 | validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:24:12 | validate | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:24:12 | validate | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values ... K\\n } | CalleeFlexibleAccessPath | withFormik | | autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values ... K\\n } | InputAccessPathFromCallee | 0.validate | | autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values ... K\\n } | InputArgumentIndex | 0 | @@ -24292,6 +159211,36 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values ... K\\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | | autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values ... K\\n } | contextSurroundingFunctionParameters | (values) | | autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values ... K\\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24299,6 +159248,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | enclosingFunctionBody | values $ #id html values email | | autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | enclosingFunctionName | validate | | autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24306,6 +159265,25 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | enclosingFunctionBody | values $ #id html values email | | autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | enclosingFunctionName | validate | | autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | contextSurroundingFunctionParameters | (values) | +| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | enclosingFunctionBody | values $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | enclosingFunctionName | validate | +| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:28:16 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:28:16 | handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:28:16 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n } | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n } | CalleeFlexibleAccessPath | withFormik | | autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n } | InputAccessPathFromCallee | 0.handleSubmit | | autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n } | InputArgumentIndex | 0 | @@ -24314,6 +159292,81 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | | autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n } | contextSurroundingFunctionParameters | (values, ?) | | autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24321,6 +159374,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | enclosingFunctionBody | values setSubmitting $ #id html values email | | autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | enclosingFunctionName | handleSubmit | | autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24328,12 +159391,153 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | enclosingFunctionBody | values setSubmitting $ #id html values email | | autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | enclosingFunctionName | handleSubmit | | autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | contextSurroundingFunctionParameters | (values, ?) | +| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | enclosingFunctionBody | values setSubmitting $ #id html values email | +| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | enclosingFunctionName | handleSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | CalleeFlexibleAccessPath | withFormik() | | autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | calleeImports | formik | | autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | | autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | contextSurroundingFunctionParameters | | | autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:33:1:38:2 | (functi ... OK \\n}) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:33:1:38:2 | (functi ... OK \\n}) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:33:1:38:2 | (functi ... OK \\n}) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | functio ... / OK \\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | functio ... / OK \\n} | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | functio ... / OK \\n} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24341,6 +159545,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | | autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | enclosingFunctionName | | | autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24348,6 +159562,41 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | | autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | enclosingFunctionName | | | autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24355,6 +159604,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | | autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | enclosingFunctionName | | | autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24362,6 +159621,150 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | | autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | enclosingFunctionName | | | autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email | +| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | enclosingFunctionName | | +| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:40:1:40:39 | import ... l-form' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:40:1:40:39 | import ... l-form' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:40:1:40:39 | import ... l-form' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:40:22:40:39 | 'react-final-form' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:40:22:40:39 | 'react-final-form' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:40:22:40:39 | 'react-final-form' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:7:42:9 | App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:7:42:9 | App | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:42:7:42:9 | App | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:7:54:1 | App = ( ... \\n />\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:7:54:1 | App = ( ... \\n />\\n) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:42:7:54:1 | App = ( ... \\n />\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | () => ( ... \\n />\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | () => ( ... \\n />\\n) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | () => ( ... \\n />\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n \\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n \\n) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n \\n) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n \\n) | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n \\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n } | assignedToPropName | onSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n } | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n } | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n } | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24369,6 +159772,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | | autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | enclosingFunctionName | App | | autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24376,6 +159789,388 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | | autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | enclosingFunctionName | App | | autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | contextSurroundingFunctionParameters | ()\n(values) | +| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | assignedToPropName | initialValues | +| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | assignedToPropName | stooge | +| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | assignedToPropName | employed | +| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n )} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n ) | assignedToPropName | render | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n ) | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n ) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n ) | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n ) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n ... >\\n ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n ... >\\n ) | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n ... >\\n ) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n ... >\\n ) | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n ... >\\n ) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | assignedToPropName | onSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | assignedToPropName | type | +| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | assignedToPropName | name | +| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n | contextSurroundingFunctionParameters | ()\n(?) | +| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n input type text name stooge \n | +| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n | enclosingFunctionName | App | +| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | functio ... OT OK\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | functio ... OT OK\\n} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24383,6 +160178,21 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | enclosingFunctionBody | e $ #id html e target value | | autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | enclosingFunctionName | plainSubmit | | autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24390,6 +160200,518 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | enclosingFunctionBody | e $ #id html e target value | | autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | enclosingFunctionName | plainSubmit | | autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | contextSurroundingFunctionParameters | (e) | +| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | enclosingFunctionBody | e $ #id html e target value | +| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | enclosingFunctionName | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:60:7:60:16 | plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:60:7:60:16 | plainReact | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:60:7:60:16 | plainReact | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:60:7:65:1 | plainRe ... form>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:60:7:65:1 | plainRe ... form>\\n) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:60:7:65:1 | plainRe ... form>\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | () => ( ... form>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | () => ( ... form>\\n) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | () => ( ... form>\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n < ... form>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n < ... form>\\n) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n < ... form>\\n) | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n < ... form>\\n) | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n < ... form>\\n) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | assignedToPropName | onSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | CalleeFlexibleAccessPath | plainSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | InputArgumentIndex | 0 | +| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | contextSurroundingFunctionParameters | ()\n(e) | +| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | assignedToPropName | type | +| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | assignedToPropName | value | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | assignedToPropName | onChange | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | assignedToPropName | type | +| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | assignedToPropName | value | +| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n | enclosingFunctionBody | form onSubmit e plainSubmit e \n input type text value state value onChange handleChange \n input type submit value Submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n | enclosingFunctionName | plainReact | +| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:67:1:67:42 | import ... -form'; | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:67:1:67:42 | import ... -form'; | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:67:1:67:42 | import ... -form'; | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:67:25:67:41 | 'react-hook-form' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:67:25:67:41 | 'react-hook-form' | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:67:25:67:41 | 'react-hook-form' | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | functio ... \\n );\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | functio ... \\n );\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | functio ... \\n );\\n} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:69:10:69:17 | HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:69:10:69:17 | HookForm | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:69:10:69:17 | HookForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n } | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data) ... OK \\n } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data) ... OK \\n } | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data) ... OK \\n } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data) ... OK \\n } | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data) ... OK \\n } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | CalleeFlexibleAccessPath | $ | | autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24397,6 +160719,16 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | | autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | enclosingFunctionName | HookForm | | autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | CalleeFlexibleAccessPath | $().html | | autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | @@ -24404,6 +160736,57 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | | autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | enclosingFunctionName | HookForm | | autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | contextSurroundingFunctionParameters | ()\n(data) | +| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n < ... rm>\\n ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n < ... rm>\\n ) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n < ... rm>\\n ) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n < ... rm>\\n ) | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n < ... rm>\\n ) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | assignedToPropName | onSubmit | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | CalleeFlexibleAccessPath | handleSubmit | | autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | calleeImports | react-hook-form | @@ -24412,6 +160795,73 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | | autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | enclosingFunctionName | HookForm | | autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | assignedToPropName | name | +| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | assignedToPropName | ref | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | CalleeFlexibleAccessPath | register | | autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | InputArgumentIndex | 0 | | autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | calleeImports | react-hook-form | @@ -24420,6 +160870,21 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | | autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | enclosingFunctionName | HookForm | | autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | fileImports | formik react react-final-form react-hook-form | | autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | CalleeFlexibleAccessPath | register | | autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | InputAccessPathFromCallee | 0.required | | autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | InputArgumentIndex | 0 | @@ -24430,6 +160895,370 @@ tokenFeatures | autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | | autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | enclosingFunctionName | HookForm | | autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | assignedToPropName | type | +| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n input name name ref register required true \n input type submit \n | +| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n | enclosingFunctionName | HookForm | +| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | functio ... \\n );\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | functio ... \\n );\\n} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | functio ... \\n );\\n} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:83:10:83:18 | HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:83:10:83:18 | HookForm2 | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:83:10:83:18 | HookForm2 | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n < ... rm>\\n ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n < ... rm>\\n ) | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n < ... rm>\\n ) | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n < ... rm>\\n ) | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n < ... rm>\\n ) | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 | \\n ... | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 |
    \\n ...
    | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 |
    \\n ...
    | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 |
    \\n ...
    | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 |
    \\n ...
    | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | assignedToPropName | name | +| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextSurroundingFunctionParameters | | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | assignedToPropName | ref | +| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() | +| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n | contextSurroundingFunctionParameters | () | +| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n | enclosingFunctionBody | register getValues useForm form \n input name name ref register \n button type button onClick values getValues $ #id html values name \n \n | +| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n | enclosingFunctionName | HookForm2 | +| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n | fileImports | formik react react-final-form react-hook-form | +| autogenerated/Xss/XssThroughDom/forms.js:89:7:96:15 |